CVE-2024-27198

An authentication bypass in JetBrains TeamCity lets attackers perform admin actions without valid credentials.

This vulnerability allows unauthenticated attackers to escalate privileges and execute administrative commands on TeamCity servers, directly impacting CI/CD pipelines used by defense contractors. DIB organizations must patch TeamCity immediately and audit for unauthorized admin access, as this bypasses standard authentication controls and could lead to supply-chain compromise or data exfiltration.

Shame score — An authentication bypass enabling admin actions is a severe, avoidable flaw that undermines core security controls and is actively exploited in the wild.