In JetBrains TeamCity before version 2025.07.1, a privilege escalation vulnerability was identified due to incorrect directory ownership. This flaw allows unauthorized users to gain elevated privileges within the system. It is crucial for users to update to the latest version to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-57732 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can manipulate directory ownership settings to escalate their privileges. This requires local access to the system, making it essential for administrators to restrict access to sensitive directories.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that allows teams to build, test, and deploy applications.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade JetBrains TeamCity to version 2025.07.1 or later. Additionally, ensure that directory ownership settings are correctly configured to prevent unauthorized access.