In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- JetBrains
- Product
- TeamCity / IDEs, Java libraries / app servers
- CVSS
- 8.8
- Exposure class
- Developer platform, Web platform
Why it ranks 15 (Routine)
- CVSS 8.8 high
- Product class: developer platform, web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.