EUVD-2026-66379
GHSA-3mf4-g44r-xcvg
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack is network-delivered via TeamViewer session; AC:H reflects session-establishment requirement; no local system privileges needed; victim must accept the session (UI:R); full C/I/A impact from arbitrary file write leading to code execution.
Primary rating from Vendor (TV).
CVSS VectorVendor: TV
Lifecycle Timeline
3DescriptionCVE.org
Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.
AnalysisAI
Path traversal in TeamViewer Desktop Clients prior to version 15.81.5 allows an authenticated remote session participant to write files to arbitrary locations on the victim's local filesystem via the file transfer and virtual file clipboard features. The affected product family spans Full Client, Host, QuickSupport, and Portable editions across Windows, Linux, and macOS, covering the v13, v14, and current v15 release lines. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be an active, accepted participant in an established TeamViewer remote session with the victim - the victim must have accepted or initiated the session, satisfying the UI:R requirement in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 score reflects AC:H and UI:R constraints that limit opportunistic mass exploitation: the attacker must be an active participant in a TeamViewer session the victim has accepted. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to upgrade all TeamViewer Desktop Client installations to version 15.81.5 or later, as directed by TeamViewer security bulletin TV-2026-1008 (https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all TeamViewer deployments across the organization to identify instances of versions 13, 14, and 15 prior to 15.81.5 (Full Client, Host, QuickSupport, and Portable editions). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Teamviewer
View allTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. Rated high severity (CVSS
TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] a
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. Rated medi
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by sk
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to exe
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0.
In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. Rate
Two-factor authentication bypass in TeamViewer Full Client and Host for macOS before 15.80 lets an already-authenticated
Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and mac
TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations. Rated high severity (CVSS 7.8), this
An issue was discovered in TeamViewer 14.2.2558. Rated high severity (CVSS 7.8), this vulnerability is low attack comple
TeamViewer DEX versions below 24.5 allow authenticated users with actioner privileges to execute arbitrary elevated comm
Same weakness CWE-73 – External Control of File Name or Path
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today