# CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability

Source: https://junglewise.ai/threats/cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-03-07. Updated: 2026-05-09  
License: CC BY 4.0 with a link back

CVE-2024-27198 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2024-03-07

JetBrains TeamCity contains an authentication bypass vulnerability (CWE-288) that allows a remote, unauthenticated attacker to perform administrative actions. The flaw exists in versions prior to 2023.11.4 and has been observed being exploited in the wild.

Technologies: [Jetbrains TeamCity](https://junglewise.ai/threats/technologies/teamcity). Vendors: [Jetbrains](https://junglewise.ai/threats/vendors/jetbrains).

## Quick answers

**Is CVE-2024-27198 exploited in the wild?** Yes. CVE-2024-27198 is known to be exploited in the wild, first recorded on 7 March 2024. Treat it as urgent.

**How severe is CVE-2024-27198?** Critical severity, with a CVSS score of 9.8, published 7 March 2024.

**Which products and versions are affected?** JetBrains TeamCity before 2023.11.4.

**Is there a fix for CVE-2024-27198?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-27198 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2024-27198?** Check whether you run Jetbrains TeamCity. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- JetBrains TeamCity before 2023.11.4

## Timeline

- 2024-03-04: disclosed: Initial CVE publication by JetBrains
- 2024-03-07: kev added: Added to CISA Known Exploited Vulnerabilities (KEV) catalog
- 2024-03-07: advisory: NVD publication date

## Related threats

- [JetBrains TeamCity stored XSS in classic build log](https://junglewise.ai/threats/cve-2026-111096-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-stored)
- [JetBrains TeamCity stored XSS in project overview](https://junglewise.ai/threats/cve-2026-111095-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-stored)
- [JetBrains TeamCity remote code execution in build messages protocol](https://junglewise.ai/threats/cve-2026-111094-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-remote)
- [JetBrains TeamCity Git submodule URL validation bypass](https://junglewise.ai/threats/cve-2026-106219-in-jetbrains-teamcity-before-2026-2-1-missing-validation-of-git)
- [JetBrains TeamCity Kotlin DSL sandbox escape RCE](https://junglewise.ai/threats/cve-2026-106218-in-jetbrains-teamcity-before-2026-1-3-2025-11-7-kotlin-dsl)