An improper authentication flaw in TeamViewer Remote Management Monitoring’s inter‑process communication system allows a locally authenticated user with low privileges to impersonate the IPC broker and trigger the Monitoring service to execute arbitrary code as the SYSTEM account, resulting in local privilege escalation. The weakness corresponds to CWE‑287 and permits complete control over the affected system from a regular user account.

TeamViewer Remote Management Monitoring for Windows versions before 26.10.1 are impacted. The vulnerability is limited to the Windows product and does not affect remote or other TeamViewer components.

The CVSS score of 7.8 rates the issue as high severity. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog, indicating no known widespread exploitation as of the current data. The attack requires a local authenticated user; the attacker can then exploit a local IPC path to elevate privileges to SYSTEM. Given the lack of external triggers, the vulnerability is not remotely exploitable and depends on local user presence.