{"id":"CVE-2026-106218","published":"2026-10-06T17:17:24.433","lastModified":"2026-10-08T14:53:05.853","description":"In JetBrains TeamCity before 2026.1.3\n2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-184"],"vendors":["jetbrains"],"products":["teamcity"],"references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows for Remote Code Execution (RCE) through a Kotlin DSL sandbox escape in JetBrains TeamCity versions prior to 2026.1.3, 2025.11.7, posing a significant security risk.","exploitability":"Exploitation requires access to the TeamCity server and knowledge of the specific Kotlin DSL vulnerability, making it moderately difficult.","blast_radius":"If exploited, this could lead to full control over the TeamCity server, potentially affecting all projects and data hosted on it.","remediation":"Upgrade to TeamCity 2026.1.3 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","kotlin","teamcity"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:59:09.588Z"}}