CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

CISA has added CVE-2026-63077, a critical remote code execution vulnerability in JetBrains TeamCity, to its Known Exploited Vulnerabilities catalog due to active exploitation in the wild. The flaw stems from deserialization of untrusted data in the TeamCity agent polling protocol, allowing unauthenticated attackers to bypass authentication and execute arbitrary commands with the privileges of the TeamCity server process. A successful exploit could lead to theft of sensitive data, configuration, and credentials, as well as compromise of build artifacts and CI/CD pipelines. Federal agencies are required to patch by August 8, 2026, per BOD 26-04.

AI-extracted · verify before operational use