The vulnerability arises from improper access control in the inter‑process communication channel between TeamViewer Full Client or Host (any version before 15.83) and the Remote Management Monitoring component (any version before 26.10.1). A local user with low privileges can exploit this flaw to run scripts or commands with SYSTEM or root rights, effectively allowing arbitrary code execution on the host. The weakness is identified as CWE‑284, missing declaration of appropriate access control.

TeamViewer products – Full Client, Host, and Remote Management Monitoring – are all affected as long as they have not been updated to at least version 15.83 for the Full Client or Host and 26.10.1 for Remote Management Monitoring.

With a CVSS score of 7.8 the vulnerability is considered high severity. No EPSS score is available, so precise exploitation probability cannot be quantified, but the KEV file does not list this issue, indicating no known widespread exploitation at this time. The attack surface is local: an authenticated user on the affected machine can trigger the vulnerability without needing network access. Once exploited, the attacker gains SYSTEM/root privileges and can perform any action with full control over the system.