# CVE-2024-27199

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

- Page: https://www.vulneraibility.com/cve/CVE-2024-27199
- CVSS: 7.3
- Known exploited: yes, in CISA KEV since 2026-04-20; CISA due date 2026-05-04; known ransomware use
- EPSS: 99.99%
- Detection templates only, no public exploit found: 1 Nuclei template
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2024-03-04)
- Weakness: CWE-23
- Published: 2024-03-04

## Affected versions

- JetBrains TeamCity: affected < 2023.11.4

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.jetbrains.com/privacy-security/issues-fixed/
- [other] https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
- [exploit] https://github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27199

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.