CVE-2026-92370 — Remote Session Access Control Bypass Leading to Remote Code Execution
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to by…
Published: 2026-09-29 · CVSS: 8.8 · CVSS 3.1
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7