CVE-2026-92371
Received Received - Intake

Improper Path Validation in TeamViewer Linux Client and Host

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: TeamViewer Germany GmbH

Description
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-92371
EUVD
EUVD-2026-89022

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
teamviewer full_client to 15.82 (exc)
teamviewer host to 15.82 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

TeamViewer Full Client and Host for Linux versions before 15.82 have a flaw where path validation is not properly handled in the Cloud Session Recording feature. A local authenticated attacker could exploit a race condition between path checks and file operations to perform privileged actions in unintended directories on the system.

Detection Guidance

This vulnerability involves a race condition in TeamViewer's Cloud Session Recording (CSR) functionality on Linux systems. Detection requires checking the installed version of TeamViewer and monitoring for suspicious file operations in unintended locations. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to overwrite critical system files, install malicious software, or access sensitive data by manipulating file operations in unintended locations. This could lead to system compromise or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected TeamViewer versions may face compliance violations if exploited.

Mitigation Strategies

Update TeamViewer Full Client and Host for Linux to version 15.82 or later to address the improper path validation vulnerability in Cloud Session Recording functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92371. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart