CVE-2025-54531: Path Traversal in JetBrains TeamCity

The core of this vulnerability lies in the way TeamCity handles plugin unpacking on Windows. An attacker could craft a malicious plugin that, when unpacked, allows them to navigate outside the intended plugin directory and access sensitive files on the server's file system. This could include configuration files containing credentials, build scripts with secrets, or even system files. Successful exploitation could lead to unauthorized access to sensitive data, code execution, and potentially complete compromise of the TeamCity server. While the vulnerability is specific to Windows, the potential impact is significant given TeamCity's role in many CI/CD pipelines.

1. Reserved2025-07-24
2. Published2025-07-28
3. Modified2026-02-26
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-54531 is to upgrade TeamCity to version 2025.07 or later, which includes the fix. If an immediate upgrade is not feasible, consider temporarily restricting plugin installations to trusted sources only. Implement strict file system permissions to limit the impact of a potential exploit. Monitor TeamCity logs for any unusual plugin installation or unpacking activity. While a WAF is unlikely to directly mitigate this, it could help detect and block suspicious plugin uploads.