--- title: CVE-2026-63077: Critical unauthenticated remote code... description: JetBrains has disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability in all versions of TeamCity On-Premises with a CVSS... canonical: https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity | daily.dev og:description: JetBrains has disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability in all versions of TeamCity On-Premises with a CVSS... og:url: https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt og:image: https://api.daily.dev/og/posts/I5HxPbWyt.png og:image:alt: CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity **[Rapid7 Cybersecurity Blog](https://daily.dev/sources/rapid7-blog)** · 2 min read · 0 upvotes · 0 comments ## Summary JetBrains has disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability in all versions of TeamCity On-Premises with a CVSS score of 9.8. The flaw stems from deserialization of untrusted data in the agent polling protocol, allowing attackers with HTTP(S) access to bypass authentication and execute arbitrary OS commands as the TeamCity server process. Successful exploitation can expose stored credentials and compromise CI/CD pipeline integrity. Fixed versions are TeamCity 2025.11.7 and 2026.1.3; a security patch plugin is available for those unable to upgrade immediately. TeamCity Cloud customers are unaffected. No active exploitation was reported at time of disclosure. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [High-Severity Security Issue Affecting TeamCity On-Premises \(CVE-2026-44413\) – Update to 2026.1 Now](https://daily.dev/posts/high-severity-security-issue-affecting-teamcity-on-premises-cve-2026-44413-update-to-2026-1-now-dryw37woz) · JetBrains · 0 upvotes · 0 comments - [CISA: Ransomware gangs now exploiting critical TeamCity flaw](https://daily.dev/posts/cisa-ransomware-gangs-now-exploiting-critical-teamcity-flaw-ivphb8400) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#jetbrains](https://daily.dev/tags/jetbrains) [View this post on daily.dev](https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity","url":"https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt"},"datePublished":"2026-07-29T16:48:00.848Z","dateModified":"2026-07-29T16:49:28.300Z","description":"JetBrains has disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability in all versions of TeamCity On-Premises with a CVSS...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/403310fc83643451d0e643aaed18bd42?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/403310fc83643451d0e643aaed18bd42?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Rapid7 Cybersecurity Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Rapid7 Cybersecurity Blog","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/rapid7-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity-i5hxpbwyt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cicd,jetbrains","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Rapid7 Cybersecurity Blog","item":"https://daily.dev/sources/rapid7-blog"},{"@type":"ListItem","position":3,"name":"CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity"}]} ```