What’s Vulnerable › Vulnerabilities
CVE-2026-19743: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-29 · updated 2026-09-30
- Weakness: CWE-22
Description
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
Affected products
- TeamViewer Full Client: from 15.0 before 15.82; from 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8); from 14.7.0 (Windows) before 14.7.48855 (Windows); from 13.2.0 (Windows) before 13.2.36230 (Windows); from 14.7.0 (Linux) before 14.7.48855 (Linux); from 13.2.0 (Linux) before 13.2.153995 (Linux) — fixed in 13.2.153994 (MacOS), 13.2.153995 (Linux), 13.2.36230 (Windows), 14.7.48855 (Linux), 14.7.48855 (MacOS), 14.7.48855 (Windows)
- TeamViewer Host: from 15.0 before 15.82; from 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8); from 14.7.0 (Windows) before 14.7.48855 (Windows); from 13.2.0 (Windows) before 13.2.36230 (Windows); from 14.7.0 (Linux) before 14.7.48855 (Linux); from 13.2.0 (Linux) before 13.2.153995 (Linux) — fixed in 13.2.153994 (MacOS), 13.2.153995 (Linux), 13.2.36230 (Windows), 14.7.48855 (Linux), 14.7.48855 (MacOS), 14.7.48855 (Windows)
How to fix
Upgrade to a fixed version: TeamViewer Full Client 13.2.153994 (MacOS), 13.2.153995 (Linux), 13.2.36230 (Windows), 14.7.48855 (Linux); TeamViewer Host 13.2.153994 (MacOS), 13.2.153995 (Linux), 13.2.36230 (Windows), 14.7.48855 (Linux). Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-19743 or the next vulnerability affects your stack