TeamViewer urges users to patch severe flaws “as soon as possible”
TeamViewer urges immediate updates for five high-severity client and host flaws, including a remote code-execution bug.
72
Vulnerability4 · 3 reads
CVE-2026-92371
Path validation race in TeamViewer Linux session recording
- CVSS 3.1
- 7.0 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
TeamViewer Full Client and Host for Linux before version 15.82 have an improper path validation flaw (CWE-59) in Cloud Session Recording. A local authenticated attacker can win a race between path checks and later file access so that privileged file operations run in unintended locations, with high impact to confidentiality, integrity, and availability. The attack is local only, needs a low-privileged account, involves no user interaction, and is rated high complexity (CVSS 3.1 base score 7.0, unchanged scope). Only those two Linux products prior to 15.82 are described as affected. No public proof of concept is known and the CVE is not in CISA KEV.
What to do: Update TeamViewer Full Client and Host for Linux to version 15.82 or later. Until then, limit local accounts that can use the client, and disable Cloud Session Recording if it is not required. There is no public proof of concept and the issue is not in CISA KEV, but unpatched Linux hosts should still be treated as high severity.
| Product | Affected |
|---|---|
| TeamViewer Full Client for Linux | prior to 15.82 |
| TeamViewer Host for Linux | prior to 15.82 |
Estimated exposure
largeon the order of 100,000–1,000,000 Linux endpoints (subset if Cloud Session Recording is unused) — TeamViewer has a very large global endpoint base, but this flaw is limited to Linux Full Client and Host builds before 15.82 and to the Cloud Session Recording path; Linux is a minority of installs and no public scan count exists for this…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.
- Weakness
- CWE-59
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
3 storiesMultiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation
TeamViewer patched five high-severity flaws enabling RCE, access-control bypass, and privilege escalation.
67
Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer patched five high-severity flaws, including an 8.8 access-control bypass that could enable code execution.
64