Product:
TeamViewer DEX – 1E Client
Summary
Improper Link Resolution Before File Access in TeamViewer DEX – 1E Client before version 26.1 on Windows allows a low-privileged local attacker to delete protected system files. This vulnerability is invoked by the 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction through a crafted RPC control junction or symlink.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.7 | CVE-2026-23563 |
Exploitation
To exploit this vulnerability, an attacker must have low privileges on the local system. They can create a crafted RPC control junction or symlink that points to a protected system file. When the delete instruction is executed, the system follows the crafted link, allowing the attacker to delete the targeted file.
Affected Products
- TeamViewer DEX – 1E Client before version 26.1 on Windows: Vulnerable to improper link resolution allowing deletion of protected files.
Mitigation
To mitigate this vulnerability, users should upgrade to TeamViewer DEX – 1E Client version 26.1 or later. Additionally, it is recommended to implement strict access controls and monitor for unauthorized file deletions.