CVE-2026-92371: Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.
Affected Software
Event History
Frequently Asked Questions
Which installations should be prioritized for review?
TeamViewer Full Client and Host installations on Linux running versions earlier than 15.82 should be reviewed, particularly where Cloud Session Recording functionality is used.
Does an attacker need remote access or user interaction?
The attacker must already have local authenticated access to the affected system. The supplied vector indicates no user interaction is required and does not indicate a network-based attack path.
How difficult is exploitation once local access is obtained?
Exploitation has high attack complexity because it relies on winning a race condition between path validation and file access. A successful attacker may cause privileged file operations at unintended locations.