PT-2025-31120 · Jetbrains · Teamcity

Published 2025-07-28 · Updated 2025-07-29 · CVE-2025-54530

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamCity versions prior to 2025.07

Description A privilege escalation issue existed in TeamCity due to incorrect directory permissions. This allowed for potential unauthorized access and control within the system.

Recommendations Update to TeamCity version 2025.07 or later.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2025-09167

CVE-2025-54530

Affected Products

Teamcity

References · 8

• https://osv.dev/vulnerability/CVE-2025-54530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54530 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09167 · Security Note
• https://t.me/CVEtracker/28591 · Telegram Post
• https://twitter.com/CVEnew/status/1949876365039169845 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1949911084116082924 · Twitter Post
• https://twitter.com/crispr_x/status/1950156899812327756 · Twitter Post