CVE-2026-100254

Authenticated users can execute commands on Windows servers in JetBrains TeamCity versions prior to 2026.2 , 2026.1.4 , and 2025.11.8 . The vulnerability is caused by a CRLF injection within the Pipeline Git connection settings . This flaw allows for remote command execution, resulting in high im...