CVE-2024-27199
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions ...
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- Record
CVE-2024-27199- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-23
- Updated
- 2026-11-02
EUVDEUVD-2024-24438
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- Record
EUVD-2024-24438- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-m7gg-q7qj-3r2r
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions ...
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- Record
GHSA-m7gg-q7qj-3r2r- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-22, CWE-23
- Updated
- 2026-11-02
CISA KEV No score
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
- Record
CVE-2024-27199- Weakness
- CWE-23
- Updated
- 2026-11-02
NVD
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- Record
CVE-2024-27199- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-23, CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | JetBrains TeamCity Unauthenticated Remote Code Execution | 2024-03-04 |
| Nuclei | TeamCity < 2023.11.4 - Authentication Bypass |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-27199 is a high vulnerability (CVSS 7.3) in Jetbrains Teamcity, published March 4, 2024. CISA lists it as known to be exploited, since April 20, 2026. EUVD reports exploitation since April 20, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.
References
jetbrains.com/privacy-security/issues-fixed
darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27199
nvd.nist.gov/vuln/detail/CVE-2024-27199