Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-44002 EUVD-2025-25803GHSA-56qh-f2pg-88cj

Arbitrary File Creation via Symbolic Link leading to Denial-of-Service

Published Aug 26, 2025 · Updated Aug 26, 2025 · Assigned by TV

Description

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.

Affected products

VendorProductAffectedFixed
TeamViewer Full Client 11.0.0 – < 15.69 15.69
TeamViewer Host 11.0.0 – < 15.69 15.69

Advisories 1

References