JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.