In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configurationReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/