Product:
TeamViewer
Summary
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows allows an attacker with local, unprivileged access to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information. The issue affects versions prior to 15.70 of TeamViewer Remote and Tensor.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.7 | CVE-2025-41421 |
Exploitation
An attacker with local access can exploit this vulnerability by creating a symbolic link that points to a sensitive file. By tricking the application into following this link during an update process, the attacker can gain unauthorized access to the file, potentially leading to privilege escalation and exposure of sensitive information.
Affected Products
- TeamViewer Full Client: Affected versions prior to 15.70 allow privilege escalation through symbolic link manipulation.
- TeamViewer Host for Windows: Similar vulnerability exists in versions prior to 15.70, enabling unauthorized access to sensitive data.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of TeamViewer Remote and Tensor, ensuring that they are using version 15.70 or later. Additionally, implementing adequate malware protection and restricting local access can help reduce the risk of exploitation.