# CVE-2026-59794: JetBrains TeamCity stored XSS in cloud profile page

Source: https://junglewise.ai/threats/cve-2026-59794-jetbrains-teamcity-stored-xss-in-cloud-profile-page  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-59794 · Severity: high · CVSS 7.3 · Published 2026-07-10

JetBrains TeamCity, a popular platform for automating software builds and deployments, was found to have a security flaw in its cloud profile management page. An attacker could inject malicious scripts into the system that would then execute in the browsers of other users, such as administrators. This could lead to unauthorized access to sensitive build data or the hijacking of administrative sessions.

Technologies: [Jetbrains TeamCity](https://junglewise.ai/threats/technologies/teamcity). Vendors: [Jetbrains](https://junglewise.ai/threats/vendors/jetbrains).

## Quick answers

**Is CVE-2026-59794 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-59794 being exploited in the wild.

**How severe is CVE-2026-59794?** High severity, with a CVSS score of 7.3, published 10 July 2026.

**Which products and versions are affected?** Jetbrains TeamCity before 2026.1.2.

**Is there a fix for CVE-2026-59794?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-59794 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-59794?** Check whether you run Jetbrains TeamCity at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stored Cross-Site Scripting (XSS) vulnerability (CWE-79) exists in JetBrains TeamCity before version 2026.1.2. The flaw is located in the cloud profile page, where the application fails to properly neutralize input provided by build agents. An attacker with low-privileged access to a build agent can report malicious data that is subsequently rendered in the web interface for other users. Successful exploitation requires a victim (typically an administrator) to view the affected cloud profile page, allowing the attacker to execute arbitrary JavaScript in the context of the victim's session. This can result in high impacts to confidentiality and integrity. The issue is resolved in TeamCity version 2026.1.2.

## Affected products

- JetBrains TeamCity before 2026.1.2

## Timeline

- 2026-07-10: disclosed
- 2026-07-10: advisory

## References

- [https://www.jetbrains.com/privacy-security/issues-fixed/](https://www.jetbrains.com/privacy-security/issues-fixed/)

## Related threats

- [JetBrains TeamCity stored XSS in classic build log](https://junglewise.ai/threats/cve-2026-111096-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-stored)
- [JetBrains TeamCity stored XSS in project overview](https://junglewise.ai/threats/cve-2026-111095-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-stored)
- [JetBrains TeamCity remote code execution in build messages protocol](https://junglewise.ai/threats/cve-2026-111094-in-jetbrains-teamcity-before-2026-2-2026-1-4-2025-11-8-remote)
- [JetBrains TeamCity Git submodule URL validation bypass](https://junglewise.ai/threats/cve-2026-106219-in-jetbrains-teamcity-before-2026-2-1-missing-validation-of-git)
- [JetBrains TeamCity Kotlin DSL sandbox escape RCE](https://junglewise.ai/threats/cve-2026-106218-in-jetbrains-teamcity-before-2026-1-3-2025-11-7-kotlin-dsl)