Product:
TeamViewer DEX
Summary
A command injection vulnerability was discovered in TeamViewer DEX, specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.8 | CVE-2026-23571 |
Exploitation
To exploit this vulnerability, an attacker with actioner privileges can craft a malicious command and inject it into the input field of the 1E-Nomad-RunPkgStatusRequest instruction. This allows the attacker to execute arbitrary commands on connected hosts, potentially leading to unauthorized access and control over the affected systems.
Affected Products
- TeamViewer DEX: Vulnerable to command injection due to improper input validation in the 1E-Nomad-RunPkgStatusRequest instruction.
Mitigation
To mitigate this vulnerability, users should ensure they are using 1E Client version 24.5 or higher, as these versions are not affected. Additionally, it is recommended to implement strict input validation and limit actioner privileges to trusted users only.