TeamCity RCE Flaw CVE-2026-63077 (CVSS 9.8) Enables Unauthenticated Command Execution

JETBRAINS has addressed a critical remote code execution (RCE) vulnerability in TeamCity, tracked as CVE-2026-63077, with a CVSS score of 9.8. This vulnerability affects all TeamCity On-Premises versions prior to 2026.1.3 and 2025.11.7, allowing unauthenticated attackers to execute operating system commands on the server via an insecure agent polling protocol. No evidence of exploitation exists currently, and patches are available. Users are advised to upgrade immediately to mitigate risks, especially since the issue can expose sensitive data and allow malicious code injections.