TeamCity

JetBrains Posts Security Patch for CVE-2026-44413 in TeamCity On-Premises

JetBrains identified and patched CVE-2026-44413, a high-severity post-authentication vulnerability in TeamCity On-Premises versions through 2025.11.4 that could allow authenticated users to expose parts of the server API to unauthorized access. The vulnerability was reported privately on April 30, 2026, by Martin Orem and assigned CVE-2026-44413; TeamCity Cloud was unaffected. JetBrains released version 2026.1 with the fix and a security patch plugin for versions 2017.1 and later, urging on-premises customers to upgrade or install the plugin. Help Net Security and NVD confirmed the privilege escalation details on May 12, 2026.

Help Net Security Reports JetBrains TeamCity CVE-2026-44413 Privilege Escalation Patch

Help Net Security covered the JetBrains TeamCity CVE-2026-44413 vulnerability on May 12, 2026. The issue permits privilege escalation and exposure of TeamCity server API endpoints such as API tokens, Git credentials, build secrets, logs, usernames, emails, and roles, potentially allowing compromise of pipelines or repositories. It affects all TeamCity On-Premises installations up to and including version 2025.11.4. JetBrains recommends upgrading to 2026.1 or applying the security patch plugin for 2017.1+, and restricting inbound access to non-standard ports. The vulnerability was reported privately by Martin Orem.

JetBrains Patches High-Severity TeamCity Vulnerability CVE-2026-44413 in 2026.1

Help Net Security Reports JetBrains TeamCity CVE-2026-44413 Patch in May 17 2026 Week in Review

JetBrains Releases TeamCity 2026.1 with CLI, MCP for AI Agents, and Pipelines Enhancements

JetBrains Issues Security Advisory for TeamCity Vulnerability Fixed in 2026.1

TeamCity 2026.1 Introduces 7 Game-Changing Features Including Security Fix CVE-2026-44413

TeamCity 2026.1 Adds AI Agent Integration via MCP and CLI Tools