A time‑of‑check time‑of‑use race condition combined with improper symbolic‑link handling in the privileged helper of TeamViewer Full Client and Host for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. The vulnerability can be exploited to gain root access, thereby compromising system confidentiality, integrity, and availability. The weakness, classified as CWE‑367, permits arbitrary code execution once the malicious package is installed.

The vulnerability affects TeamViewer Full Client and TeamViewer Host running on macOS versions prior to 15.83. Users who have not upgraded beyond the latest available patch are exposed. Only the macOS implementations of these products are listed in the advisory; other operating systems are not affected.

The CVSS score of 7.8 indicates a high severity, but the EPSS score is not available, making it uncertain how frequently exploits may be seen in the wild. The vulnerability is not listed in CISA's KEV catalog. Attackers must be local to the machine and possess low‑privileged access to trigger the race condition; network exposure is not required. Given the local nature of the attack and the potential to gain full system control, the risk to business-critical systems is significant.