Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Teamviewer |
|
No data.
No data.
References
History
Wed, 30 Sep 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 30 Sep 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Teamviewer
Teamviewer full Client Teamviewer host |
|
| Vendors & Products |
Teamviewer
Teamviewer full Client Teamviewer host |
Tue, 29 Sep 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation. | |
| Title | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: TV
Published: 2026-09-29T15:39:11.503Z
Updated: 2026-09-30T15:28:19.226Z
Reserved: 2026-08-13T13:55:15.000Z
Link: CVE-2026-19743
Vulnrichment
Updated: 2026-09-30T15:26:42.259Z
NVD
Status : Deferred
Published: 2026-09-29T16:17:07.177
Modified: 2026-09-30T16:17:12.610
Link: CVE-2026-19743
Redhat
No data.