CVE-2026-100253

Summary

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL

Affected Software

VendorProductVersion RangeStatus
JetBrainsTeamCity`0 < 2026.2,
2026.1.4,
2025.11.8`affected

Weaknesses

  • CWE-184: CWE-184

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References