{"id":"CVE-2026-92375","kind":"vulnerability","aliases":["CVE-2026-92375"],"related":[],"title":"TeamViewer: local low-privilege user can run scripts as SYSTEM","description":"An improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root.","summary":"TeamViewer Full Client or Host before 15.83, paired with the Remote Management Monitoring component before 26.10.1, has an access control flaw in their inter-process communication. A local user with low privileges can make it execute scripts as SYSTEM (root on non-Windows).","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","other","remote-management","teamviewer","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":"- Check the installed TeamViewer Full Client or Host version in the About dialog or on the Windows program list; a build below `15.83` is affected.\n- Check the installed Remote Management Monitoring component version; a build below `26.10.1` is affected.","fix":"- Update TeamViewer Full Client or Host to `15.83` or later.\n- Update the Remote Management Monitoring component to `26.10.1` or later.","status":"open","published_at":"2026-10-27T16:17:31+00:00","first_seen_at":"2026-10-27T16:33:07+00:00","triaged_at":"2026-10-27T16:34:11+00:00","updated_at":"2026-10-27T16:34:11+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-10-27T16:34:11Z","model":"claude-haiku-5-5","output":{"fix":"- Update TeamViewer Full Client or Host to `15.83` or later.\n- Update the Remote Management Monitoring component to `26.10.1` or later.","reach":"local","title":"TeamViewer: local low-privilege user can run scripts as SYSTEM","impact":"high","summary":"TeamViewer Full Client or Host before 15.83, paired with the Remote Management Monitoring component before 26.10.1, has an access control flaw in their inter-process communication. A local user with low privileges can make it execute scripts as SYSTEM (root on non-Windows).","category":"other","nicknames":[],"who_cares":["teamviewer","windows","endpoints","remote-management"],"confidence":0.8,"needs_auth":"yes","worst_case":"local low-privilege user runs scripts as SYSTEM","analyst_note":"Check the TeamViewer security bulletin for the exact affected platforms and any workaround for hosts that cannot update yet.","how_to_check":"- Check the installed TeamViewer Full Client or Host version in the About dialog or on the Windows program list; a build below `15.83` is affected.\n- Check the installed Remote Management Monitoring component version; a build below `26.10.1` is affected.","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Machines running TeamViewer Full Client or Host together with the Remote Management Monitoring component, where a local account with low privileges exists. Hosts without the Remote Management Monitoring component, or with no untrusted local users, are less exposed; the sources do not say whether the flaw applies to every platform.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000627,"input_tokens":3312,"output_tokens":592,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-92375':14A,17A '15.83':31B,88C '26.10.1':40B,98C 'access':43B,72C 'allow':99C 'attack':103C 'authent':102C 'client':27B,82C 'communic':51B,78C 'compon':38B,94C 'control':44B,73C 'cve':12A,15A 'endpoint':18B 'execut':61B,108C 'flaw':45B 'full':26B,81C 'host':29B,84C 'improp':71C 'inter':49B 'inter-process':48B 'ipc':77C 'local':2A,53B,101C 'low':4A,56B,105C 'low-privileg':3A 'make':59B 'manag':22B,36B,92C 'monitor':37B,93C 'non':68B 'non-window':67B 'pair':32B 'prior':85C,95C 'privileg':5A,57B,106C 'process':50B 'remot':21B,35B,91C 'remote-manag':20B 'root':65B 'run':8A 'script':9A,62B,109C 'system':11A,64B 'system/root':111C 'teamview':1A,23B,25B,80C 'user':6A,54B 'version':87C,97C 'vulner':74C 'window':24B,69B","nicknames":[],"mitigations":[],"who_affected":"Machines running TeamViewer Full Client or Host together with the Remote Management Monitoring component, where a local account with low privileges exists. Hosts without the Remote Management Monitoring component, or with no untrusted local users, are less exposed; the sources do not say whether the flaw applies to every platform.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T16:17:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"psirt@teamviewer.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92375","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92375","severity":null,"published_at":"2026-10-27T16:17:31+00:00","modified_at":"2026-10-27T16:17:31+00:00","first_seen_at":"2026-10-27T16:33:07+00:00","fetched_at":"2026-10-27T16:33:07+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}