TeamCity On-Premises RCE Flaw Fixed: Update to 2025.11.7 or 2026.1.3
JetBrains disclosed a critical unauthenticated RCE bug (CVE‑2026‑63077) in all TeamCity on‑premises editions that lets an attacker bypass login and run OS commands. The flaw is fixed in versions 2025.11.7 and 2026.1.3, and a security‑patch plugin is available for older 2017.1+ builds.