CVE-2026-92375 PUBLISHED

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

Assigner: TV
Reserved: 16.09.2026 Published: 27.10.2026 Updated: 27.10.2026

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor TeamViewer
Product Full Client
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
  • affected from 14.7.0 (Windows) to 14.7.48868 (Windows) (excl.)
  • affected from 14.7.0 (Linux) to 14.7.48868 (Linux) (excl.)
  • affected from 14.7.0 (macOS) to 14.7.48868 (macOS) (excl.)
  • affected from 13.2.0 (Windows) to 13.2.36231 (Windows) (excl.)
  • affected from 13.2.0 (Linux) to 13.2.154008 (Linux) (excl.)
  • affected from 13.2.0 (macOS) to 13.2.154007 (macOS) (excl.)
Vendor TeamViewer
Product Host
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
  • affected from 14.7.0 (Windows) to 14.7.48868 (Windows) (excl.)
  • affected from 14.7.0 (Linux) to 14.7.48868 (Linux) (excl.)
  • affected from 14.7.0 (macOS) to 14.7.48868 (macOS) (excl.)
  • affected from 13.2.0 (Windows) to 13.2.36231 (Windows) (excl.)
  • affected from 13.2.0 (Linux) to 13.2.154008 (Linux) (excl.)
  • affected from 13.2.0 (macOS) to 13.2.154007 (macOS) (excl.)
Vendor TeamViewer
Product Remote Management - Monitoring
Versions Default: unaffected
  • affected from 0 to 26.10.1 (excl.)

Solutions

Update to the latest available version.

Credits

  • 0x_alibabas (Giuliano Sanfins) finder

References

Problem Types

  • CWE-284: Improper Access Control CWE