CVE-2026-100254

JetBrains / TeamCity PUBLISHED

Description (CNA)

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

Affected (CNA)

Vendor / product	Versions
JetBrains / TeamCity	affected 0 before 2026.2, 2026.1.4, 2025.11.8

CWE

CWE-78

References

https://www.jetbrains.com/privacy-security/issues-fixed/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.