Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2026-16444 EUVD-2026-66379GHSA-3mf4-g44r-xcvg

Improper Validation of File Paths in TeamViewer Desktop Clients

Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by TV

Vendor: TeamViewer Product: Full Client, Host, QuickSupport (v13 for Linux) Product: Full Client, Host, QuickSupport (v13 for macOS) Product: Full Client, Host, QuickSupport (v14 for Linux) Product: Full Client, Host, QuickSupport (v14 for macOS) Product: Full Client, Host, QuickSupport (v14 for Windows) Product: Full Client, Host, QuickSupport & Portable Product: Full Client, Host, QuickSupport & Portable (for Windows 7 & 8) Product: Full Client, Host, QuickSupport & Portable (v13 for Windows) Platform: Linux Platform: macOS Platform: Windows

Description

Improper
neutralization of path traversal sequences in TeamViewer Desktop Clients prior
Version 15.81.5 allows an authenticated remote session participant to write files
to unintended locations on the local file system via file transfer or virtual
file clipboard mechanisms. An attacker can leverage this behavior to achieve
arbitrary file write and potentially execute code with the privileges of the
affected user.

Affected products

VendorProductAffectedFixed
TeamViewer Full Client, Host, QuickSupport & Portable 15.0 – < 15.81.5 15.81.5
TeamViewer Full Client, Host, QuickSupport & Portable (for Windows 7 & 8) 15.64.0 – < 15.64.7 15.64.7
TeamViewer Full Client, Host, QuickSupport (v14 for Windows) 14.0 – < 14.7.48833 14.7.48833
TeamViewer Full Client, Host, QuickSupport (v14 for Linux) 14.0 – < 14.7.48838 14.7.48838
TeamViewer Full Client, Host, QuickSupport (v14 for macOS) 14.0 – < 14.7.48838 14.7.48838
TeamViewer Full Client, Host, QuickSupport & Portable (v13 for Windows) 13.0 – < 13.2.36229 13.2.36229
TeamViewer Full Client, Host, QuickSupport (v13 for Linux) 13.0 – < 13.2.153978 13.2.153978
TeamViewer Full Client, Host, QuickSupport (v13 for macOS) 13.0 – < 13.2.153981 13.2.153981

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • jamir0quai/CVE-2026-16444 ★ 0 · Oct 5, 2026

    CVE-2026-16444 — Arbitrary file write on the controller via TeamViewer Classical File Transfer (TV-2026-1008)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References