Vulnerability · Published Feb 5, 2026 · Assigned by TV
CVE-2026-23572Improper Access Control in TeamViewer clients
High 7.2
In plain English
A high-severity incorrect authorization in One from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Official description
Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | Remote | 0 – before 15.74.5 |
| TeamViewer | Tensor | 0 – before 15.74.5 |
| TeamViewer | One | 0 – before 15.74.5 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H