In JetBrains TeamCity prior to 2021.1.2, remote code execution via the agent push functionality is possible.
jetbrains teamcity