CVE-2024-27199

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.jetbrains.com/privacy-security/issues-fixed/ ; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27199

Remediation deadline: May 4, 2026

Ransomware use: Known

Description

JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.

Timeline

Published:April 20th, 2026 12:00 AM

Last modified:April 20th, 2026 12:00 AM

Added to KEV:April 20th, 2026

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

JetBrains

Products

TeamCity

Weaknesses (CWE)

CWE-23

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute