CVE-2026-100254
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings
- Published Sep 30, 2026
- CVSS 8.8 high
- 0.5% chance of exploitation in the next 30 days (EPSS)
- A fix is available