JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.

Published 31 Jul 2026Updated 31 Jul 202624 sources
CVSS 0.0 ✓ VERIFIED REFERENCE△ CISA KEV

What happened

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.

Affected versions

TeamCity: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
Exploit-DB 52411JetBrains TeamCity 2023.11.4 - Authentication Bypassİbrahimsql2025-08-11VerifiedPoC-in-GitHub · Chocapikk/CVE-2024-27198Proof of Concept for Authentication Bypass in JetBrains TeamCity Pre-2023.11.4★ 34Chocapikk2024-03-04CandidatePoC-in-GitHub · yoryio/CVE-2024-27198Exploit for CVE-2024-27198 - TeamCity Server★ 37yoryio2024-03-05CandidatePoC-in-GitHub · W01fh4cker/CVE-2024-27198-RCECVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4★ 154W01fh4cker2024-03-06CandidatePoC-in-GitHub · rampantspark/CVE-2024-27198A PoC for CVE-2024-27198 written in Go★ 0rampantspark2024-03-07CandidatePoC-in-GitHub · passwa11/CVE-2024-27198-RCE★ 3passwa112024-03-08CandidatePoC-in-GitHub · CharonDefalt/CVE-2024-27198-RCE★ 1CharonDefalt2024-03-09CandidatePoC-in-GitHub · K3ysTr0K3R/CVE-2024-27198-EXPLOITA PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass★ 8K3ysTr0K3R2024-03-09CandidatePoC-in-GitHub · Shimon03/Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-Em fevereiro de 2024, foi identificado duas novas vulnerabilidades que afetam o servidor JetBrains TeamCity (CVE-2024-27198 e CVE-2024-27199)★ 0Shimon032024-04-02CandidatePoC-in-GitHub · Stuub/RCity-CVE-2024-27198CVE-2024-27198 & CVE-2024-27199 PoC - RCE, Admin Account Creation, Enum Users, Server Information★ 35Stuub2024-04-22CandidatePoC-in-GitHub · HPT-Intern-Task-Submission/CVE-2024-27198★ 0HPT-Intern-Task-Submission2024-07-20CandidatePoC-in-GitHub · jrbH4CK/CVE-2024-27198PoC about CVE-2024-27198★ 0jrbH4CK2024-08-16CandidatePoC-in-GitHub · geniuszly/CVE-2024-27198is a PoC tool that targets a vulnerability in the TeamCity server (CVE-2024-27198)★ 3geniuszly2024-10-09CandidatePoC-in-GitHub · Cythonic1/CVE-2024-27198_POCa proof of concept of the CVE-2024-27198 which infect jetbrains teamCity★ 0Cythonic12024-10-14CandidatePoC-in-GitHub · ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-VulnerabilityIn this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution (RCE) attack on a vulnerable TeamCity server.★ 0ArtemCyberLab2025-01-22CandidatePoC-in-GitHub · EynaExp/CVE-2024-27198-POCproof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198★ 1EynaExp2025-12-17CandidatePoC-in-GitHub · cmpnn-romain/CVE-2024-27198_LabLab for the CVE-2024-27198★ 0cmpnn-romain2026-05-18CandidatePoC-in-GitHub · Ne0zer01/CVE-2024-27198_LAB★ 0Ne0zer012026-05-18CandidatePoC-in-GitHub · ptd200110/CVE-2024-27198-SOC-Lab★ 2ptd2001102026-06-19CandidatePoC-in-GitHub · BilalAlshiekh912/Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-CyberDefenders JetBrains Lab★ 0BilalAlshiekh9122026-07-01CandidatePoC-in-GitHub · kxom9ks/CVE-2024-27198-TeamCity★ 0kxom9ks2026-07-24CandidatePoC-in-GitHub · abiral-timalsina/Cyber-Defenders-lab-My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR/NBT-NS credential poisoning — each with step-by-step packet analysis, screenshots, and a full Wireshark filter/command reference. Personal SOC Analyst Tier 1 learning log.★ 0abiral-timalsina2026-08-01Candidate