JetBrains TeamCity prior to 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.
jetbrains teamcity