Kotlin DSL sandbox escape code execution in JetBrains TeamCity (CVE-2026-65906)

A vulnerability in JetBrains TeamCity allows code execution via a Kotlin DSL sandbox escape. An attacker able to use the Kotlin DSL build configuration feature could escape the sandbox and execute arbitrary code on the server. Affected versions: - before 2026.1.2 - before 2025.11.6 We recommend updating to: 2026.1.2, 2025.11.6. CVSS 8.8 · our assessment: this_week Reference: https://www.jetbrains.com/privacy-security/issues-fixed/ Details: https://vuln.today/cve/CVE-2026-65906