Vulnerability · Published Dec 11, 2025 · Assigned by TV
CVE-2025-44016File Hash Validation Bypass in NomadBranch.exe
High 8.8
In plain English
A high-severity improper input validation in DEX from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Official description
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | DEX | 0 – before 25.11.0.290 – through 25.9.0.460 – through 25.5.0.530 – through 24.5.0.69 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H