JetBrains TeamCity Authentication Bypass Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2024-27198 · Published 04/03/2024 · updated 17/06/2026

JetBrains TeamCity Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/03/2024. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

In short

CVE-2024-27198 is a CRITICAL (CVSS 9.8) vulnerability affecting teamcity (jetbrains).
Exploited in the wild: CISA added it to the KEV catalog on 07/03/2024.
Chance of exploitation in the next 30 days (EPSS): 99.9%, higher than 100.0% of all vulnerabilities.
Fix: update to 2023.11.4 or later.

Package	Affected versions	Patched versions
teamcity jetbrains	`< 2023.11.4`	`2023.11.4`

Description

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

References

darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive · Press/Media Coverage
jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2024-27198

More vulnerabilities in teamcity

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

teamcity

jetbrains

< 2023.11.4

2023.11.4

More vulnerabilities in teamcity

See all →