Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-64994 EUVD-2025-202670GHSA-2rf3-6xwj-242m

Privilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instruction

Published Dec 11, 2025 · Updated Dec 11, 2025 · Assigned by TV

Description

A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow local attackers with write access to a PATH directory on a device to escalate privileges and execute arbitrary code as SYSTEM.

Affected products

VendorProductAffectedFixed
TeamViewer DEX < 17.1 17.1

References