Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands

A critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to CI/CD infrastructure. JetBrains has released patches in versions 2025.11.7 and 2026.1.3, urging administrators to update immediately to prevent potential security compromises.