---
id: "CVE-2026-92374"
kind: "vulnerability"
aliases: ["CVE-2026-92374"]
title: "TeamViewer macOS helper race lets local users install root-level packages"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["endpoints", "macos", "runtime", "teamviewer"]
not_affected_if: ["teamviewer-not-installed", "version-15.83-or-later"]
published_at: "2026-10-27T16:17:31+00:00"
first_seen_at: "2026-10-27T16:33:07+00:00"
updated_at: "2026-10-27T16:34:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92374", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# TeamViewer macOS helper race lets local users install root-level packages

A race condition plus unsafe symbolic link handling in the privileged helper of TeamViewer Full Client and Host for macOS lets a local user bypass installer package checks. An attacker who wins the race installs a malicious package and gains root.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed TeamViewer version in the About dialog or with `defaults read /Applications/TeamViewer.app/Contents/Info CFBundleShortVersionString`
- List the privileged helper with `ls -l /Library/PrivilegedHelperTools/` and note any TeamViewer helper files

## Fix

- Update TeamViewer Full Client and Host on macOS to `15.83` or later

## Timeline

- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92374

## From the sources

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_