In JetBrains TeamCity before version 2025.07.1, a privilege escalation vulnerability was identified due to incorrect directory ownership. This flaw allows attackers to gain elevated privileges within the system. It is crucial for users to update to the latest version to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-57732 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can manipulate directory ownership settings to escalate their privileges. This requires local access to the system, making it critical for administrators to ensure proper directory permissions are enforced.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that allows teams to automate their build processes.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains TeamCity version 2025.07.1 or later. Additionally, it is recommended to review and correct directory ownership settings to prevent unauthorized privilege escalation.