In JetBrains TeamCity before version 2025.07.1, privilege escalation was possible due to incorrect directory ownership. This vulnerability could allow unauthorized users to gain elevated privileges within the system. It is crucial for users of affected versions to be aware of this issue and take necessary precautions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-57732 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can manipulate directory ownership settings to escalate their privileges within JetBrains TeamCity. This requires local access to the system, making it a high complexity attack.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that allows developers to automate the build process.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains TeamCity version 2025.07.1 or later, where the issue has been addressed. Additionally, reviewing directory ownership settings and ensuring proper permissions can help prevent privilege escalation.