Description
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
Vendor Solution
Update to the latest version.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Wed, 30 Sep 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Teamviewer
Teamviewer full Client Teamviewer host |
|
| Vendors & Products |
Teamviewer
Teamviewer full Client Teamviewer host |
Tue, 29 Sep 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation. | |
| Title | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: TV
Published:
Updated: 2026-09-29T15:39:11.503Z
Reserved: 2026-08-13T13:55:15.000Z
Link: CVE-2026-19743
No data.
Status : Deferred
Published: 2026-09-29T16:17:07.177
Modified: 2026-09-29T21:35:31.350
Link: CVE-2026-19743
No data.
OpenCVE Enrichment
Updated: 2026-09-30T01:15:04Z
Weaknesses