Access Control Flaw in TeamViewer Clients for Windows, macOS, and Linux

CVE-2026-23572

What is CVE-2026-23572?

An access control weakness exists in TeamViewer's Full and Host clients across Windows, macOS, and Linux platforms, specifically in versions prior to 15.74.5. This flaw permits an authenticated user to circumvent additional access controls, particularly those linked to the ‘Allow after confirmation’ feature during remote sessions. If exploited, an attacker can gain unauthorized access without the necessary local confirmation. To exploit this vulnerability, the attacker must first authenticate using an ID/password, Session Link, or Easy Access, highlighting the importance of ensuring prompt updates to safeguard against this issue.

References