JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

Published 4 Sep 2026Updated 4 Sep 2026302 sources
CVSS 0.0 ✓ VERIFIED REFERENCE△ CISA KEV

What happened

JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

Affected versions

TeamCity: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
Exploit-DB 51884JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE)ByteHunter2024-03-14VerifiedPoC-in-GitHub · H454NSec/CVE-2023-42793JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit★ 45H454NSec2023-09-29CandidatePoC-in-GitHub · whoamins/CVE-2023-42793★ 0whoamins2023-10-05CandidatePoC-in-GitHub · Zenmovie/CVE-2023-42793PoC of CVE-2023-42793★ 9Zenmovie2023-10-05CandidatePoC-in-GitHub · johnossawy/CVE-2023-42793_POC★ 0johnossawy2024-01-07CandidatePoC-in-GitHub · StanleyJobsonAU/GhostTownProof of Concept script to exploit CVE-2023-42793 (TeamCity)★ 0StanleyJobsonAU2024-01-15CandidatePoC-in-GitHub · hotplugin0x01/CVE-2023-42793JetBrains TeamCity Unauthenticated Remote Code Execution - Python3 Implementation★ 2hotplugin0x012024-04-21CandidatePoC-in-GitHub · B4l3rI0n/CVE-2023-42793JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE), CVE-2023-42793★ 11B4l3rI0n2024-04-24CandidatePoC-in-GitHub · junnythemarksman/CVE-2023-42793TeamCity CVE-2023-42793 exploit written in Rust★ 1junnythemarksman2024-05-27CandidatePoC-in-GitHub · HusenjanDev/CVE-2023-42793TeamCity RCE for Linux (CVE-2023-42793)★ 1HusenjanDev2024-07-05CandidatePoC-in-GitHub · FlojBoj/CVE-2023-42793TeamCity CVE-2023-42793 RCE (Remote Code Execution)★ 0FlojBoj2024-08-24CandidatePoC-in-GitHub · SwiftSecur/teamcity-exploit-cve-2023-42793teamcity-exploit-cve-2023-42793★ 1SwiftSecur2024-09-20CandidatePoC-in-GitHub · becrevex/CVE-2023-42793TeamCity server scanner to detect CVE-2023-42793★ 0becrevex2024-10-08CandidatePoC-in-GitHub · jakehomb/cve-2023-42793★ 0jakehomb2025-04-14CandidatePoC-in-GitHub · syaifulandy/Nuclei-Template-CVE-2023-42793.yamlWindows & linux support★ 1syaifulandy2025-05-11CandidatePoC-in-GitHub · cxdxnt/CVE-2023-42793TeamCity 2023.05.3 - CVE-2023-42793 - Create username administrator.★ 0cxdxnt2025-11-27CandidatePoC-in-GitHub · DDestinys/CVE-2023-42793★ 0DDestinys2026-01-06CandidatePoC-in-GitHub · burakacar6/CVE-2023-42793-TeamCity-Unauthenticated-RCEA PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793).★ 0burakacar62026-09-05Candidate