← All advisories

High severity7.3CISA KEVNVD Advisory· Published Mar 4, 2024· Updated Apr 21, 2026

CVE-2024-27199

CVE-2024-27199

Description

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Jetbrains/Teamcity2 versions
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*range: <2023.11.4
- (no CPE)range: <2023.11.4

Patches

Vulnerability mechanics

References

4

github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.pynvdExploit
www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrivenvdPress/Media Coverage

News mentions

1

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)
Help Net Security · May 12, 2026