CVE-2026-92371CWE-59

CVE-2026-92371

High · published September 29, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00105 · 1.0th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-09-29T20:17Z
References (1)
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/ · [email protected]
EPSS history
Timeline
  • 01 OCT 03:50Z
    EPSS moved — → 0%
    epss
  • 29 SEP 15:41Z
    Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording
    cvelistv5