Privilege Escalation in TeamViewer Full Client and Host for Windows

CVE-2025-41421

What is CVE-2025-41421?

This vulnerability arises from inadequate handling of symbolic links in TeamViewer Full Client and Host for Windows versions prior to 15.70. An attacker with local, unprivileged access can exploit this flaw by manipulating the update file path, potentially leading to privilege escalation. Such an exploit may allow unauthorized access to sensitive data on the compromised system, especially if adequate malware protection measures are not in place.

References