CVE-2026-106219

EUVD-2026-93505
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
JetBrainsCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
jetbrainsteamcity
𝑥
< 2026.2.1
CNA
Common Weakness Enumeration
References
https://www.jetbrains.com/privacy-security/issues-fixed/