VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 16, 2025· Updated Jun 17, 2026

CVE-2025-68267

CVE-2025-68267

Description

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token

Affected products

3
  • Jetbrains/Teamcity3 versions
    cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*range: <2025.11.1
    • (no CPE)range: <2025.11.1
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.