Description
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user interaction by clicking the malicious link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | 15.0 – < 15.81.5, 14.0 – < 14.7.488838, 13.0 – < 13.2.153978 | 15.81.5 |
| TeamViewer | Host | 15.0 – < 15.81.5, 14.0 – < 14.7.488838, 13.0 – < 13.2.153978 | 15.81.5 |
Advisories 1
- WID-SEC-2026-3045 TeamViewer Clients: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode BSI CERT-Bund (WID) · Aug 26, 2026