# CVE-2026-12703: TeamViewer macOS 2FA bypass in Unattended Access connection flow

Source: https://junglewise.ai/threats/cve-2026-12703-teamviewer-macos-2fa-bypass-in-unattended-access-connection-flow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-29. Updated: 2026-07-29  
License: CC BY 4.0 with a link back

CVE-2026-12703 · Severity: high · CVSS 8 · Published 2026-07-29

TeamViewer for macOS contains a security flaw that allows an authorized user with management permissions to bypass two-factor authentication (2FA) when connecting to a remote computer. This occurs specifically when 'Unattended Access' is configured, potentially allowing an attacker to gain full remote control of a macOS system without the required secondary approval. Organizations using TeamViewer to manage macOS fleets should update to version 15.80 or later to ensure connection security policies are enforced.

Vendors: [Teamviewer](https://junglewise.ai/threats/vendors/teamviewer).

## Quick answers

**Is CVE-2026-12703 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-12703 being exploited in the wild.

**How severe is CVE-2026-12703?** High severity, with a CVSS score of 8, published 29 July 2026.

**Which products and versions are affected?** Teamviewer ONE Full Client < 15.80; Teamviewer Remote Full Client < 15.80; Teamviewer Remote Host < 15.80; Teamviewer Tensor Full Client < 15.80.

**Is there a fix for CVE-2026-12703?** A patch was published on 2026-07-29: Fixed in version 15.80 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-12703 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-12703?** Check whether you run Teamviewer ONE Full Client, Teamviewer Remote Full Client, Teamviewer Remote Host or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A business logic error (CWE-288) exists in the TeamViewer macOS client and host components regarding the 'Connections' approval flow. An authenticated attacker with high privileges (specifically device management permissions for pre-authenticated macOS devices) can exploit this flaw to bypass configured two-factor authentication requirements when using the Unattended Access feature. By utilizing an alternate path in the connection logic, the attacker can establish a full remote session without the secondary approval trigger. The vulnerability is fixed in version 15.80; it does not affect TeamViewer Conditional Access policies.

## Affected products

- TeamViewer Remote Full Client < 15.80
- TeamViewer Remote Host < 15.80
- TeamViewer Tensor Full Client < 15.80
- TeamViewer ONE Full Client < 15.80

## Timeline

- 2026-07-29: disclosed
- 2026-07-29: patched: Fixed in version 15.80
- 2026-07-29: advisory

## References

- [https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/](https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1007/)