Skip to content
OpenAdvisories
High · 8.8 CVE-2025-44016 EUVD-2025-202680GHSA-xqm7-qxfg-5xwm

File Hash Validation Bypass in NomadBranch.exe

Published Dec 11, 2025 · Updated Dec 11, 2025 · Assigned by TV

Description

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.

Affected products

VendorProductAffectedFixed
TeamViewer DEX < 25.11.0.29, ≤ 25.9.0.46, ≤ 25.5.0.53, ≤ 24.5.0.69 25.11.0.29

References