CVE-2025-46266: Unauthenticated Transmission of Data in NomadBranch.exe

Q: What is the severity of CVE-2025-46266?

CVE-2025-46266 is a high-severity vulnerability that can lead to unauthorized data transmission.

Q: How do I fix CVE-2025-46266?

To mitigate CVE-2025-46266, update the TeamViewer DEX Client to version 25.11 or later.

Q: What software is affected by CVE-2025-46266?

CVE-2025-46266 affects the TeamViewer DEX Client prior to version 25.11.

Q: What is the impact of CVE-2025-46266?

CVE-2025-46266 can cause sensitive data leakage by allowing data transmission to arbitrary internal IP addresses.

Q: Who is vulnerable to CVE-2025-46266?

Any organization using TeamViewer DEX Client versions earlier than 25.11 is vulnerable to CVE-2025-46266.

Published Dec 11, 2025

Updated

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

Affected Software

3 affected components

TeamViewer DEX Client<25.11

All of the following

TeamViewer Digital Employee Experience<25.11

Microsoft Windows

Remediation

Information

Update the TeamViewer DEX Client to the latest available version (25.11 or above).

Event History

Dec 11, 2025

CVE Published

via MITRE·11:25 AM

Data Sourced

via MITRE·11:25 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-46266?

CVE-2025-46266 is a high-severity vulnerability that can lead to unauthorized data transmission.

How do I fix CVE-2025-46266?

To mitigate CVE-2025-46266, update the TeamViewer DEX Client to version 25.11 or later.

What software is affected by CVE-2025-46266?