In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Exploitation of this RCE vulnerability in JetBrains TeamCity has been reported. Patches are available and should be applied immediately.

According to its banner, the version of JetBrains TeamCity running on the remote host is < 2025.11.7 or 2026.x < 2026.1.3. It is, therefore, affected by a Remote Code Execution via the agent polling protocol.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.7 or 2026.1.x prior to 2026.1.3. It is, therefore, affected by a vulnerability:

  - Unauthenticated remote code execution was possible via the agent polling protocol. (CVE-2026-63077)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115346	JetBrains TeamCity 2026.x < 2026.1.3 Remote Code Execution	Web App Scanning	Component Vulnerability	Version Based	critical
115345	JetBrains TeamCity < 2025.11.7 Remote Code Execution	Web App Scanning	Component Vulnerability	Version Based	critical
330833	JetBrains TeamCity < 2025.11.7 / 2026.1.x < 2026.1.3 RCE (CVE-2026-63077)	Nessus	Misc.	Combined	critical

Detections

Analytics

CVE-2026-63077

critical

Tenable Plugins

critical

critical

critical