Active TeamCity Exploitation Threatens Software Build and Deployment Pipelines
Active exploitation of CVE-2026-63077 in TeamCity highlights the risk around CI/CD servers, where the critical flaw can allow unauthenticated remote command execution.
Active TeamCity Exploitation Threatens Software Build and Deployment Pipelines
Security reports on August 6, 2026 warned that attackers had begun exploiting a critical JetBrains TeamCity vulnerability. CVE-2026-63077 carries a CVSS score of 9.8 and can allow unauthenticated attackers to execute commands on a vulnerable server.
Why are CI/CD servers sensitive targets?
Build servers often have access to source repositories, deployment credentials, secrets, test environments, and sometimes production infrastructure. Taking control of such a system can provide an attacker with a strong position for stealing data or tampering with software delivery.
Teams running TeamCity On-Premises should verify their version, install JetBrains security updates immediately, and review logs for unusual requests or commands. The incident is a reminder that software supply-chain security starts with protecting build and deployment infrastructure itself.