Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer products - CVE-2026-92374

Vulnerability identifier: #VU158335

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-92374

CWE-ID: CWE-367

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges to root.

The vulnerability exists due to a time-of-check time-of-use race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host for macOS when verifying and installing packages. A local user can exploit the race condition and symbolic link handling to bypass installer package verification and install a malicious package to escalate privileges to root.

TeamViewer Remote Full Client for Windows
TeamViewer Host for macOS
TeamViewer Full Client for macOS
TeamViewer Host for Linux
TeamViewer Full Client for Linux
TeamViewer Remote Host for Windows

Install security update from vendor's website.

TeamViewer Remote Full Client for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Remote Host for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Host for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Full Client for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Host for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83
TeamViewer Full Client for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/

• Multiple vulnerabilities in TeamViewer Client and Host