PT-2025-31121 · Jetbrains · Teamcity

Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-54531

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions TeamCity versions prior to 2025.07

Description A path traversal issue existed in JetBrains TeamCity due to improper handling of plugin unpacking on Windows systems. This allowed for unauthorized access to files and directories.

Recommendations Update TeamCity to version 2025.07 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

BDU:2025-09147

CVE-2025-54531

Affected Products

Teamcity

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-54531 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09147 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54531 · Vendor Advisory
• https://t.me/CVEtracker/28592 · Telegram Post
• https://twitter.com/CVEnew/status/1949876364141609462 · Twitter Post