CVE-2026-106219

Summary

In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

Published 2026-10-06 · first seen here 2026-10-10

Hunt & detect

Threat hunt brief, Sigma rule and Splunk / Sentinel / CrowdStrike queries are not available for this item yet.

References

• NVD entry
• https://www.jetbrains.com/privacy-security/issues-fixed/