CVE-2026-100253
8.8 HIGHPublished 2026-09-30 · Updated 2026-10-06
AI risk analysis
- Summary
- The flaw allows sandbox escape leading to code execution in JetBrains TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8, due to vulnerabilities in the versioned settings Kotlin DSL.
- Exploitability
- Exploitation requires access to the affected TeamCity version and knowledge of the specific vulnerability in the versioned settings Kotlin DSL. It is moderately difficult to exploit.
- Blast radius
- If exploited, this flaw could lead to full code execution on the affected TeamCity server, potentially allowing attackers to gain complete control over the system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to TeamCity 2026.2 or later.
rcewebkotlinteamcity
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-184
Vendors
jetbrains
Products
teamcity
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-106218
- HIGHCVE-2026-105650PoC
- HIGHCVE-2026-63671PoC
- HIGHCVE-2026-67615PoC
- HIGHCVE-2026-84316PoC
- CRITICALCVE-2020-37282PoC
- HIGHCVE-2022-51019PoC
- CRITICALCVE-2023-54399
Related by shared AI tags and CWE weakness class. Browse the full archive.