Actively exploited vulnerability

CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability

JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.

CISA KEV source 20 Apr 2026 added 4 May 2026 remediation due

JetBrains · TeamCity

Known ransomware use: Known

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Trend Micro Research, News and Perspectives19 Mar 2024

TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types

CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.

CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability

Affected product

Required action

Related Yasna coverage

TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types