CVE-2026-106218
Analyzed Analyzed - Analysis Complete

JetBrains TeamCity Sandbox Escape RCE Vulnerability

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: JetBrains s.r.o.

Description
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-08
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-106218
EUVD
EUVD-2026-93504

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
jetbrains teamcity to 2025.11.7 (exc)
jetbrains teamcity From 2026.1.1 (inc) to 2026.1.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-184 The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a sandbox escape in JetBrains TeamCity before versions 2026.1.3 and 2025.11.7. It allows remote code execution (RCE) on the server by bypassing the Kotlin DSL sandbox, potentially giving attackers full control over the affected system.

Detection Guidance

To detect this vulnerability, check the version of JetBrains TeamCity installed on your system. If the version is before 2026.1.3 or 2025.11.7, the system is vulnerable. Compare your installed version against the patched versions mentioned in the CVE description.

Impact Analysis

If exploited, this vulnerability could allow unauthorized users to execute arbitrary code on the TeamCity server. This may lead to data breaches, system compromise, or disruption of services, depending on the server's role and the attacker's goals.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, reputational damage, and loss of trust if such breaches occur due to unpatched systems.

Mitigation Strategies

Update JetBrains TeamCity to version 2026.1.3 or later to address the RCE vulnerability caused by Kotlin DSL sandbox escape.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106218. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart