CVE-2026-111583: Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Client for Windowsto a version that resolves this vulnerability.Fixed in 15.82
Event History
Frequently Asked Questions
Who is exposed to this issue?
Windows systems running TeamViewer Full Client or Host prior to version 15.82 are affected when Advanced Asset Management is being installed. Exploitation requires a local authenticated user with low privileges.
What does an attacker need to do to exploit it?
The attacker needs local access to the Windows system and the ability to place a crafted installer options file in the installer staging directory. That file is processed when the Advanced Asset Management installer activates its service, allowing commands to run as SYSTEM.
Is user interaction required?
Yes. The supplied vector indicates user interaction is required, and the described attack occurs during installation of Advanced Asset Management and service activation.
How can I determine whether a system is affected?
Check whether the system runs TeamViewer Full Client or Host on Windows and whether its version is earlier than 15.82. Systems installing Advanced Asset Management are the relevant exposure scenario described.