Access Control Flaw in TeamViewer Clients for Windows, macOS, and Linux

CVE-2026-23572

What is CVE-2026-23572?

An access control weakness exists in TeamViewer's Full and Host clients across Windows, macOS, and Linux platforms, specifically in versions prior to 15.74.5. This flaw permits an authenticated user to circumvent additional access controls, particularly those linked to the ‘Allow after confirmation’ feature during remote sessions. If exploited, an attacker can gain unauthorized access without the necessary local confirmation. To exploit this vulnerability, the attacker must first authenticate using an ID/password, Session Link, or Easy Access, highlighting the importance of ensuring prompt updates to safeguard against this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References