CVE-2026-92370: Remote Session Access Control Bypass Leading to Remote Code Execution
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed?
TeamViewer Full Client and TeamViewer Host deployments on Windows, Linux, and macOS are identified as affected, along with related affected modules. Exposure depends on a remote session being established with permissions configured to restrict particular features.
What does an attacker need to exploit this issue?
The attacker must be authenticated as a remote user and able to participate in session establishment. No separate local access or elevated privileges are indicated, but user interaction is required according to the provided severity vector.
Are restrictive TeamViewer permission settings sufficient to prevent exploitation?
No. The vulnerability allows an authenticated remote attacker to modify access-control parameters for restricted features and bypass permissions explicitly denied by the victim's configuration.
What is the potential impact after a successful bypass?
An attacker can perform unauthorized actions using features that the configuration was intended to deny. The issue may also lead to remote code execution on the target system, with high confidentiality, integrity, and availability impact indicated.