Critical Security Flaw Fixed in TeamCity 2026.1: New CLI, AI Agent Integration, and Pipeline Upgrades Unveiled

Urgent Security Advisory: TeamCity On-Premises Vulnerability Patched

A high-severity post-authentication security vulnerability (CVE-2026-44413) has been discovered in all versions of TeamCity On-Premises. If exploited, this flaw could allow any authenticated user to expose parts of the TeamCity server API to unauthorized users.

Critical Security Flaw Fixed in TeamCity 2026.1: New CLI, AI Agent Integration, and Pipeline Upgrades Unveiled — Source: blog.jetbrains.com

JetBrains has released TeamCity 2026.1, which includes a fix for this vulnerability, along with a security patch plugin for versions 2017.1 and later. TeamCity Cloud users are not affected and do not need to take action. "We strongly recommend all on-premises customers upgrade to 2026.1 or apply the security patch immediately," said a JetBrains spokesperson.

TeamCity 2026.1: Major Features Arrive

Alongside the critical security fix, TeamCity 2026.1 introduces a powerful new command-line interface (CLI), support for AI agents through the Model Context Protocol (MCP), and significant Pipeline enhancements. The release also bundles SAML authentication by default and makes the AI Assistant available in Enterprise trial accounts.

TeamCity CLI: Control from Terminal and AI Agents

The new TeamCity CLI is a free, lightweight, open-source tool that brings full TeamCity functionality to your terminal and AI coding agents. Users can investigate failed builds, apply fixes, configure pipelines, and retrigger builds without leaving the command line.

The CLI includes an agent skill that enables AI agents to check build status, analyze failures, and interact with pipelines. Both human users and AI agents can follow real-time updates, including build state changes, step progress, and streaming logs. "This CLI changes how teams interact with their CI/CD pipeline — it's built for speed and automation," explained a JetBrains product manager.

Pipeline Enhancements for Greater Power

Pipelines in TeamCity 2026.1 receive several upgrades that simplify configuration and increase flexibility. New features include improved step definitions, better parameter handling, and enhanced parallel execution options. These changes aim to reduce setup time and make complex workflows more manageable.

Background: TeamCity's Evolution

TeamCity is a continuous integration and delivery server developed by JetBrains, widely used by development teams for build automation, testing, and deployment. The tool has evolved over years to support cloud and on-premises environments, with a focus on extensibility and developer productivity. The 2026.1 release marks a significant step forward by bridging the gap between traditional CI interfaces and modern AI-driven workflows.

What This Means for Developers and Teams

With the security vulnerability now fixed, on-premises users can restore confidence in their TeamCity setups. The new CLI and AI agent support allow teams to automate more of their CI/CD processes, reducing manual toil and accelerating feedback loops. "This release isn't just about new features — it's about enabling developers to work smarter, not harder," said a JetBrains community lead.

The livestream scheduled for May 12, 2026 (1-hour event) will walk through all new features and future plans. Register for the livestream to learn more.

How to Get Started

The TeamCity CLI is available immediately. Install via brew, bash script, winget, PowerShell, or npm (see documentation for full instructions). To log in to your server, run teamcity auth login --server https://example.com. More than 60 commands are included, with more planned.

Tags: