PT-2025-40242 · Teamviewer · Teamviewer Remote+2

Twosevenonet · Published 2025-09-30 · Updated 2025-10-01 · CVE-2025-41421

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeamViewer versions prior to 15.70 TeamViewer Remote versions prior to 15.70 Tensor versions prior to 15.70

Description A flaw exists in the handling of symbolic links within the TeamViewer Full Client and Host for Windows, as well as TeamViewer Remote and Tensor. An attacker with local, unprivileged access to a device without sufficient malware protection can exploit this to gain higher privileges by manipulating the update file path. Successful exploitation could lead to unauthorized access to sensitive information.

Recommendations Update TeamViewer to version 15.70 or later. Update TeamViewer Remote to version 15.70 or later. Update Tensor to version 15.70 or later.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-00338

CVE-2025-41421

Affected Products

Teamviewer

Teamviewer Remote

Tensor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-41421 · Security Note
• https://bdu.fstec.ru/vul/2026-00338 · Security Note
• https://twitter.com/CVEnew/status/1973391442929394101 · Twitter Post
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1004 · Note
• https://t.me/CVEtracker/33832 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973409650075684913 · Twitter Post