CVE-2026-106218

JetBrains TeamCity versions prior to 2026.1.3 and 2025.11.7 are vulnerable to a Kotlin DSL sandbox escape, which could allow an attacker to execute arbitrary code on the server. This high-severity vulnerability poses a significant risk to users managing CI/CD pipelines, as it could lead to unauthorized access and control over the server environment. Organizations utilizing TeamCity should prioritize patching to mitigate potential exploitation.