Description
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | 15.0 – < 15.82 | 15.82 |
| TeamViewer | Host | 15.0 – < 15.82 | 15.82 |
Advisories 1
- WID-SEC-2026-3670 TeamViewer: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 29, 2026