EUVD-2026-66381
GHSA-hv9x-3jwv-hvm4
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Chat-delivered URL requires no attacker authentication (PR:N) and no special conditions (AC:L), but victim must click the link (UI:R); command execution as current user yields full H/H/H impact with no scope change.
Primary rating from Vendor (TV).
CVSS VectorVendor: TV
Lifecycle Timeline
3DescriptionCVE.org
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.
AnalysisAI
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to execute arbitrary OS commands as the current user by sending a crafted URL through the out-of-session chat feature. The attack exploits CWE-78 (OS Command Injection) in the Linux URL-handling path and requires only that the victim click the malicious link - no attacker authentication is needed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The out-of-session chat feature must be accessible to the attacker - this is a standard, default-enabled feature of TeamViewer that allows remote parties to send messages before a session is established. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score is well-supported by the attack characteristics: network-accessible (AV:N), low complexity (AC:L), no attacker authentication (PR:N), with only user interaction required (UI:R) and high impact across confidentiality, integrity, and availability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is upgrading TeamViewer Full Client and Host on Linux to version 15.81.5 or later, as specified in vendor advisory TV-2026-1009 (https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1009/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Linux systems running TeamViewer and determine which versions are installed; notify users of the risk and restrict non-essential use of the out-of-session chat feature until patched. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Teamviewer
View allTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. Rated high severity (CVSS
TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] a
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. Rated medi
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by sk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0.
In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. Rate
Two-factor authentication bypass in TeamViewer Full Client and Host for macOS before 15.80 lets an already-authenticated
Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and mac
TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations. Rated high severity (CVSS 7.8), this
An issue was discovered in TeamViewer 14.2.2558. Rated high severity (CVSS 7.8), this vulnerability is low attack comple
Path traversal in TeamViewer Desktop Clients prior to version 15.81.5 allows an authenticated remote session participant
TeamViewer DEX versions below 24.5 allow authenticated users with actioner privileges to execute arbitrary elevated comm
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today