---
id: "CVE-2026-111583"
kind: "vulnerability"
aliases: ["CVE-2026-111583"]
title: "TeamViewer Windows installer lets local low-privilege users run commands as SYSTEM"
severity: "high"
cvss: 7.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["endpoints", "other", "teamviewer", "windows"]
not_affected_if: ["no-advanced-asset-management", "teamviewer-fixed-version"]
published_at: "2026-10-27T16:17:29+00:00"
first_seen_at: "2026-10-27T16:33:07+00:00"
updated_at: "2026-10-27T16:34:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111583", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# TeamViewer Windows installer lets local low-privilege users run commands as SYSTEM

TeamViewer Full Client and Host before 15.82 for Windows mishandle the installer staging directory during Advanced Asset Management installation. A local user with low privileges can plant a crafted installer options file that the installer processes, running arbitrary commands as SYSTEM.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed TeamViewer version on Windows hosts, e.g. in the TeamViewer About dialog or the Programs and Features list.
- Check whether the Advanced Asset Management component is installed on the host.

## Fix

- Upgrade TeamViewer Full Client and Host to `15.82` or later on Windows.
- unknown for interim mitigations in the sources.

## Timeline

- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111583

## From the sources

Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_