CVE-2026-16444: Improper Validation of File Paths in TeamViewer Desktop Clients

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-26 · updated 2026-09-01
Weakness: CWE-73

Description

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.

Affected products

TeamViewer Full Client, Host, QuickSupport & Portable: from 15.0 before 15.81.5 — fixed in 15.81.5
TeamViewer Full Client, Host, QuickSupport & Portable (for Windows 7 & 8): from 15.64.0 before 15.64.7 — fixed in 15.64.7
TeamViewer Full Client, Host, QuickSupport & Portable (v13 for Windows): from 13.0 before 13.2.36229 — fixed in 13.2.36229
TeamViewer Full Client, Host, QuickSupport (v13 for Linux): from 13.0 before 13.2.153978 — fixed in 13.2.153978
TeamViewer Full Client, Host, QuickSupport (v13 for macOS): from 13.0 before 13.2.153981 — fixed in 13.2.153981
TeamViewer Full Client, Host, QuickSupport (v14 for Linux): from 14.0 before 14.7.48838 — fixed in 14.7.48838
TeamViewer Full Client, Host, QuickSupport (v14 for macOS): from 14.0 before 14.7.48838 — fixed in 14.7.48838
TeamViewer Full Client, Host, QuickSupport (v14 for Windows): from 14.0 before 14.7.48833 — fixed in 14.7.48833

How to fix

Upgrade to a fixed version: TeamViewer Full Client, Host, QuickSupport & Portable 15.81.5; TeamViewer Full Client, Host, QuickSupport & Portable (for Windows 7 & 8) 15.64.7; TeamViewer Full Client, Host, QuickSupport & Portable (v13 for Windows) 13.2.36229; TeamViewer Full Client, Host, QuickSupport (v13 for Linux) 13.2.153978; TeamViewer Full Client, Host, QuickSupport (v13 for macOS) 13.2.153981; TeamViewer Full Client, Host, QuickSupport (v14 for Linux) 14.7.48838; TeamViewer Full Client, Host, QuickSupport (v14 for macOS) 14.7.48838; TeamViewer Full Client, Host, QuickSupport (v14 for Windows) 14.7.48833. Check the vendor advisory for mitigations.

References

https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/

Get alerted when CVE-2026-16444 or the next vulnerability affects your stack