Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-23563 EUVD-2026-4980GHSA-82cg-rxq8-hc7m

Privilege escalation in TeamViewer DEX via DeleteFileByPath instruction

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by TV

Description

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

Affected products

VendorProductAffectedFixed
TeamViewer DEX < 26.1 26.1

References