Improper access control during the installation of the Advanced Asset Management (AAM) component in TeamViewer Full Client and Host for Windows allows a local user with low privileges to supply a crafted installer options file. This file is processed by the AAM installer during service activation, enabling the user to execute arbitrary commands as the SYSTEM account. The resulting privilege escalation gives the attacker full control over the affected machine, including the ability to install malware, exfiltrate data, and maintain persistence. The weakness maps to CWE‑269, Improper Privilege Management.

The vulnerability affects TeamViewer Full Client and TeamViewer Host operating on Windows, specifically versions before 15.82. Users who install or run these older versions are at risk.

The CVSS score of 7.3 indicates a high severity for a local privilege escalation. Although no EPSS score is available, the exploit is trivial to launch for any low‑privileged user who can run the installer, making the likelihood high in environments where such users are present. The vulnerability is not listed in the CISA KEV catalog, but the absence of a public exploit does not negate the risk of an insider or compromised local account. Once the affected component is patched, the risk is mitigated.