In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 25, 2026 · NIST NVD

   Detected

   In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

2. Jun 17, 2026 · NIST NVD

   Updated

   In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

Affected

• cpe jetbrains/teamcityversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2026-28194

  In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

  nvd.nist.gov

References

• Vendor Advisory · jetbrains.com