CVE-2026-92375
CVE-2026-92375 · Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
CVSS 7.8 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
full client
- Versions
- ≥ 0, < 15.83: Affected (custom)
- ≥ 15.64.0 (Legacy Windows 7 & 8), < 15.64.10 (Legacy Windows 7 & 8): Affected (custom)
- ≥ 14.7.0 (Windows), < 14.7.48868 (Windows): Affected (custom)
- ≥ 14.7.0 (Linux), < 14.7.48868 (Linux): Affected (custom)
- ≥ 14.7.0 (macOS), < 14.7.48868 (macOS): Affected (custom)
- ≥ 13.2.0 (Windows), < 13.2.36231 (Windows): Affected (custom)
- ≥ 13.2.0 (Linux), < 13.2.154008 (Linux): Affected (custom)
- ≥ 13.2.0 (macOS), < 13.2.154007 (macOS): Affected (custom)
Update to 13.2.154008 (Linux); Update to 14.7.48868 (Windows); Update to 15.64.10 (Legacy Windows 7 & 8)
host
- Versions
- ≥ 0, < 15.83: Affected (custom)
- ≥ 15.64.0 (Legacy Windows 7 & 8), < 15.64.10 (Legacy Windows 7 & 8): Affected (custom)
- ≥ 14.7.0 (Windows), < 14.7.48868 (Windows): Affected (custom)
- ≥ 14.7.0 (Linux), < 14.7.48868 (Linux): Affected (custom)
- ≥ 14.7.0 (macOS), < 14.7.48868 (macOS): Affected (custom)
- ≥ 13.2.0 (Windows), < 13.2.36231 (Windows): Affected (custom)
- ≥ 13.2.0 (Linux), < 13.2.154008 (Linux): Affected (custom)
- ≥ 13.2.0 (macOS), < 13.2.154007 (macOS): Affected (custom)
Update to 13.2.154008 (Linux); Update to 14.7.48868 (Windows); Update to 15.64.10 (Legacy Windows 7 & 8)
remote management - monitoring
- Versions
- ≥ 0, < 26.10.1: Affected (custom)
Update to 26.10.1