[CVE-2026-100254] In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute command…

Descripción técnica

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-78

Fuente oficial

Publicado en NIST NVD.