CVE-2026-92374: Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Full Client and Host for macOSto a version that resolves this vulnerability.Fixed in 15.83
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Systems running TeamViewer Full Client or Host for macOS before version 15.83 are affected. Exploitation requires a local attacker who already has low-privileged access to the Mac.
What access does an attacker need to exploit this issue?
The attacker must be able to execute locally with low privileges. No user interaction is required according to the supplied severity vector.
What is the impact of successful exploitation?
An attacker can bypass installer package verification and install a malicious package through the privileged helper. This can result in local privilege escalation to root.
What version addresses the issue?
The issue affects versions prior to 15.83 for macOS. Updating to version 15.83 or later addresses the affected version range described.