JetBrains Urging Customers to Patch Critical TeamCity Flaw that Enables OS Command Execution

JetBrains has urgently released security updates for a critical vulnerability in TeamCity On-Premises that could allow remote attackers to bypass authentication and execute arbitrary operating system commands. This vulnerability, tracked as CVE-2026-63077, affects all versions of TeamCity On-Premises. The company has addressed the issue in TeamCity versions 2025.11.7 and 2026.1.3. Administrators who are unable to upgrade can install a dedicated security patch plugin, which is supported on TeamCity versions 2017.1 and later. The vulnerability was privately reported on July 10, 2026, by security researcher Antoni Tremblay through JetBrains’ coordinated disclosure process. JetBrains published an advisory on July 27 and...

Read the full article at the source.