Product:
TeamViewer DEX Client
Summary
A vulnerability in TeamViewer DEX Client – Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-46266 |
Exploitation
To exploit this vulnerability, an attacker must be on the same adjacent network as the target system. By sending specially crafted requests to the Content Distribution Service, the attacker can manipulate the service to send sensitive data to an internal IP address of their choosing, leading to potential data leakage.
Affected Products
- TeamViewer DEX Client – Vulnerable versions prior to 25.11 for Windows may allow data leakage through manipulated service requests.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of TeamViewer DEX Client. Additionally, network segmentation and monitoring can help prevent unauthorized access to the service.