Log in Start free

Vulnerability · Published Sep 29, 2026 · Assigned by TV

CVE-2026-19743Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

High 7.8

In plain English

A high-severity path traversal in Full Client from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.

Affected products (as reported)

VendorProductVersions
TeamViewer Full Client 15.0 – before 15.8215.64.0 (Legacy Windows 7 & 8) – before 15.64.8 (Legacy Windows 7 & 8)14.7.0 (Windows) – before 14.7.48855 (Windows)13.2.0 (Windows) – before 13.2.36230 (Windows)14.7.0 (Linux) – before 14.7.48855 (Linux)13.2.0 (Linux) – before 13.2.153995 (Linux)14.7.0 (MacOS) – before 14.7.48855 (MacOS)13.2.0 (MacOS) – before 13.2.153994 (MacOS)
TeamViewer Host 15.0 – before 15.8215.64.0 (Legacy Windows 7 & 8) – before 15.64.8 (Legacy Windows 7 & 8)14.7.0 (Windows) – before 14.7.48855 (Windows)13.2.0 (Windows) – before 13.2.36230 (Windows)14.7.0 (Linux) – before 14.7.48855 (Linux)13.2.0 (Linux) – before 13.2.153995 (Linux)14.7.0 (MacOS) – before 14.7.48855 (MacOS)13.2.0 (MacOS) – before 13.2.153994 (MacOS)

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References