JetBrains TeamCity < 2025.11.1: GitHub PA Token Stored Privilege Escalation
CVE-2025-68267 Published on December 16, 2025

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token

NVD

Vulnerability Analysis

CVE-2025-68267 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

Least Privilege Violation

The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.


Products Associated with CVE-2025-68267

Want to know whenever a new CVE is published for JetBrains Teamcity? stack.watch will email you.

JetBrains Teamcity
 

Affected Versions

JetBrains TeamCity:

Exploit Probability

EPSS
0.01%
Percentile
0.93%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.