Description
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | 15.0 – < 15.82, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.8 (Legacy Windows 7 & 8), 14.7.0 (Windows) – < 14.7.48855 (Windows), 13.2.0 (Windows) – < 13.2.36230 (Windows), 14.7.0 (Linux) – < 14.7.48855 (Linux), 13.2.0 (Linux) – < 13.2.153995 (Linux), 14.7.0 (MacOS) – < 14.7.48855 (MacOS), 13.2.0 (MacO… | 15.82 |
| TeamViewer | Host | 15.0 – < 15.82, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.8 (Legacy Windows 7 & 8), 14.7.0 (Windows) – < 14.7.48855 (Windows), 13.2.0 (Windows) – < 13.2.36230 (Windows), 14.7.0 (Linux) – < 14.7.48855 (Linux), 13.2.0 (Linux) – < 13.2.153995 (Linux), 14.7.0 (MacOS) – < 14.7.48855 (MacOS), 13.2.0 (MacO… | 15.82 |
Advisories 1
- WID-SEC-2026-3670 TeamViewer: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 29, 2026