Authentication bypass using an alternate path or channel in TeamViewer Full Client for macOS and TeamViewer Remote Host for macOS - CVE-2026-12703

Vulnerability details

The vulnerability allows a remote user to bypass the configured 2fa for connections approval and establish a remote connection to an affected macos host.

The vulnerability exists due to authentication bypass using an alternate path or channel in unattended access when handling connections approval via unattended access. A remote privileged user can use unattended access to bypass the configured 2fa for connections approval and establish a remote connection to an affected macos host.

The issue affects macos hosts where unattended access is configured and requires device management permissions for pre-authenticated macos devices. TeamViewer conditional access policies are not bypassed.

Affected software

How to mitigate CVE-2026-12703

External References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/
• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/

Related Security Bulletins

• Bypass of 2FA for connections in TeamViewer for macOS