SB2026073069 - Bypass of 2FA for connections in TeamViewer for macOS

Description

This security bulletin contains information about 1 vulnerability.

1) Authentication bypass using an alternate path or channel (CVE-ID: CVE-2026-12703)

CWE-ID: CWE-288 - Authentication Bypass Using an Alternate Path or Channel

CVSSv4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to bypass the configured 2fa for connections approval and establish a remote connection to an affected macos host.

The vulnerability exists due to authentication bypass using an alternate path or channel in unattended access when handling connections approval via unattended access. A remote privileged user can use unattended access to bypass the configured 2fa for connections approval and establish a remote connection to an affected macos host.

The issue affects macos hosts where unattended access is configured and requires device management permissions for pre-authenticated macos devices. TeamViewer conditional access policies are not bypassed.

Remediation

Install update from vendor's website.

References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/
• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/