CVE-2026-92375: Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Full Client or Hostto a version that resolves this vulnerability.Fixed in 15.83 - Upgrade
Upgrade
TeamViewer Remote Management Monitoringto a version that resolves this vulnerability.Fixed in 26.10.1
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running TeamViewer Full Client or Host before version 15.83 together with the Remote Management Monitoring component before version 26.10.1 are exposed. Exploitation requires local access by an authenticated low-privileged user.
What access does an attacker need to exploit it?
An attacker must already have a local authenticated account with low privileges on the affected system. No user interaction is required.
What is the impact of successful exploitation?
A successful attacker can execute scripts as SYSTEM on Windows or root on applicable systems, giving them full control of the affected host.
How can I remediate the issue?
Update TeamViewer Full Client or Host to version 15.83 or later and update the Remote Management Monitoring component to version 26.10.1 or later.