CVE-2026-16444: TeamViewer Desktop Clients path traversal in file transfer

CVE-2026-16444 · Severity: high · CVSS 7.5 · Published 2026-08-26

TeamViewer is a remote desktop application that allows authorized users to access and control computers remotely. A vulnerability in versions prior to 15.81.5 allows an authenticated remote user to write files to arbitrary locations on the targeted system through file transfer or clipboard mechanisms, potentially enabling code execution with the victim's privileges.

Technologies: Teamviewer Full Client. Vendors: Teamviewer.

Quick answers

Is CVE-2026-16444 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-16444 being exploited in the wild.
How severe is CVE-2026-16444?
High severity, with a CVSS score of 7.5, published 26 August 2026.
Which products and versions are affected?
Teamviewer Full Client < 15.81.5 (current); < 15.64.7 (Windows 7 & 8); < 14.7.48833 (Windows v14) / < 14.7.48838 (Linux/macOS v14); < 13.2.36229 (Windows v13) / < 13.2.153978 (Linux v13) / < 13.2.153981 (macOS v13); Teamviewer Portable < 15.64.7 (Windows 7 & 8); Teamviewer QuickSupport < 15.81.5 (current); < 15.64.7 (Windows 7 & 8); < 14.7.48833 (Windows v14) / < 14.7.48838 (Linux/macOS v14); < 13.2.36229 (Windows v13) / < 13.2.153978 (Linux v13) / < 13.2.153981 (macOS v13); Teamviewer Remote affected versions not separately specified; and 1 more.
Is there a fix for CVE-2026-16444?
A patch was published on 2026-08-26: Version 15.81.5 and corresponding legacy branch versions released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-16444 attacked?
It is attacked over the network, in a web application.
Am I affected by CVE-2026-16444?
Check whether you run Teamviewer Full Client, Teamviewer Portable, Teamviewer QuickSupport or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a path traversal flaw (CWE-73) in TeamViewer Desktop Clients where filenames supplied by a remote session participant are not properly sanitized before file creation. An authenticated attacker with an active remote session can exploit this via file transfer or virtual file clipboard mechanisms to write files to unintended directories on the local file system. The attack requires an established remote session (authenticated), but no further user interaction beyond the attacker's ability to initiate file operations. Successful exploitation allows arbitrary file write and potentially arbitrary code execution with the privileges of the affected user. The vulnerability is patched in version 15.81.5 and corresponding legacy branch versions (14.7.48833/48838, 13.2.36229/153978/153981).

Affected products

  • TeamViewer Full Client < 15.81.5 (current); < 15.64.7 (Windows 7 & 8); < 14.7.48833 (Windows v14) / < 14.7.48838 (Linux/macOS v14); < 13.2.36229 (Windows v13) / < 13.2.153978 (Linux v13) / < 13.2.153981 (macOS v13)
  • TeamViewer Host < 15.81.5 (current); < 15.64.7 (Windows 7 & 8); < 14.7.48833 (Windows v14) / < 14.7.48838 (Linux/macOS v14); < 13.2.36229 (Windows v13) / < 13.2.153978 (Linux v13) / < 13.2.153981 (macOS v13)
  • TeamViewer QuickSupport < 15.81.5 (current); < 15.64.7 (Windows 7 & 8); < 14.7.48833 (Windows v14) / < 14.7.48838 (Linux/macOS v14); < 13.2.36229 (Windows v13) / < 13.2.153978 (Linux v13) / < 13.2.153981 (macOS v13)
  • TeamViewer Portable < 15.64.7 (Windows 7 & 8)
  • TeamViewer Remote affected versions not separately specified
  • TeamViewer Tensor affected versions not separately specified
  • TeamViewer ONE affected versions not separately specified

Timeline

  • 2026-08-26: disclosed
  • 2026-08-26: patched: Version 15.81.5 and corresponding legacy branch versions released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.