Skip to content
OpenAdvisories
High · 7.0 CVE-2026-92371 EUVD-2026-89022GHSA-j8jf-5637-q9wc

Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

Published Sep 29, 2026 · Updated Sep 30, 2026 · Assigned by TV

Description

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.

Affected products

VendorProductAffectedFixed
TeamViewer Full Client 15.0 – < 15.82 15.82
TeamViewer Host 15.0 – < 15.82 15.82

Advisories 1

References