Vulnerability in TeamViewer Full Client

[ Description ]Official description

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund29 Sep 2026WID-SEC-2026-3670

  TeamViewer: Multiple vulnerabilities Translated from German

  CVE-2026-19743CVE-2026-92371CVE-2026-92370+2 more CVEs

[ References ]References

• www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010