Security Flaw in JetBrains TeamCity Affecting Project Configuration
CVE-2025-68162

2.7LOW

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
16 December 2025

What is CVE-2025-68162?

A security vulnerability in JetBrains TeamCity prior to version 2025.11 allows attackers to load extensions through project configuration, potentially leading to unauthorized actions and exposure of sensitive information. This flaw emphasizes the importance of secure management of project settings to mitigate risks associated with extension integration. Users of affected versions should update to the latest release to ensure their systems are protected against potential exploitation.

Affected Version(s)

TeamCity 0 < 2025.11

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-68162 : Security Flaw in JetBrains TeamCity Affecting Project Configuration