CVE-2026-65906

In JetBrains TeamCity versions before 2026.1 and 2025.11.5, authenticated users could expose the server API to unauthorized access.

In JetBrains TeamCity before 2026.1.2 and 2025.11.6, code execution in Git VCS roots was possible.

In JetBrains TeamCity versions before 2023.05.3, reflected XSS was possible during copying Build Step.

In JetBrains TeamCity versions before 2023.05, a stored XSS vulnerability was present in the NuGet feed page.

In JetBrains TeamCity versions before 2023.05, a stored XSS vulnerability was present in the Commit Status Publisher window.

In JetBrains TeamCity before version 2023.05, it was possible to bypass permission checks, allowing for the execution of admin actions.

In JetBrains TeamCity before version 2026.1.2, a vulnerability was found that allows pipeline modification due to improper permission checks.

In JetBrains TeamCity before version 2026.1.2, a stored XSS vulnerability was discovered via unauthenticated agent registration. An attacker can inject a malicious script that will be executed in other users' browsers.

In JetBrains TeamCity before version 2026.1.2, a stored XSS vulnerability was found on the cloud profile page. The attack was possible via agent-reported data.