CVE-2026-92371

EUVD-2026-89022
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 1.5%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
teamviewerfull_client
15.0 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerhost
15.0 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerremote
15.0 ≤
𝑥
< 15.82
ENGINSIGHT
Common Weakness Enumeration
References
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/