CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability

High severity, CVSS 7.3. Actively exploited: in CISA KEV since 2026-04-20. EPSS: 100% chance of exploitation in the next 30 days.

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Affected products

• JetBrains TeamCity: before 2023.11.4 (fixed in 2023.11.4)

Published 2024-03-04. Last modified 2026-06-17.