CVE-2026-92370 Remote Session Access Control Bypass Leading to Remote Code Execution
Authenticated attackers can bypass permission settings to perform unauthorized actions and potentially execute code on TeamViewer clients.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-92370?
CVE-2026-92370 is a high-severity authentication bypass vulnerability in TeamViewer Full Client, published on 29 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
Weakness: CWE-284
Which versions are affected by CVE-2026-92370?
How do I fix CVE-2026-92370?
No fix has been published for CVE-2026-92370 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-92370 being exploited?
There is no known exploitation of CVE-2026-92370 in the wild and no public exploit code.
Sources
Also known as GHSA-27v8-wq28-cjrp.