TeamViewer has released updated software that closes security vulnerabilities in its clients, classified as highly risky. Attackers from the network can thus inject and execute malicious code or commands, for example.
TeamViewer warns of this in two security advisories. The more severe vulnerability affects the TeamViewer clients for Linux. If attackers send carefully prepared URLs in the chat, they can inject arbitrary commands that are executed in the victim’s context after clicking the link. Chat messages can come from users on the list by default or, if explicitly configured, also from people outside ( CVE-2026-19042 , CVSS 8.8 , Risk “ high ”). In version 15.81.5 and newer of TeamViewer Full Client and TeamViewer Host for Linux, the developers have closed the vulnerability. Updates are also available for older versions; administrators using 13 and 14 version branches should update to version 14.7.48838 or newer.
Insufficient filtering of path traversal sequences impacts the TeamViewer desktop clients. This allows authenticated attackers to write files to areas on the remote maintenance target that were not intended, via file transfer or the virtual file clipboard. They can potentially execute malicious code in the context of the affected user ( CVE-2026-16444 , CVSS 7.5 , Risk “ high ”). TeamViewer versions Full Client, Host, and QuickSupport for Linux, macOS, and Windows are available in version 15.81.5, which closes the vulnerabilities. In the security advisory, the developers also link to updates for older TeamViewer versions.
Both vulnerabilities were reported to TeamViewer as part of the bug bounty program through responsible disclosure. Therefore, TeamViewer states that the company is not aware of any attacks in the wild targeting these vulnerabilities or any other public disclosure of the vulnerabilities. Administrators should still download and apply the updates promptly.
Most recently, a security vulnerability in TeamViewer became known at the beginning of February. Attackers could gain access without prior confirmation .
This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
