PT-2025-50591 · Teamviewer · Teamviewer Dex Client

Published 2025-12-11 · Updated 2025-12-27 · CVE-2025-44016

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 25.11

Description A flaw exists in the TeamViewer DEX Client Content Distribution Service (NomadBranch.exe) that allows attackers to circumvent file integrity checks. By supplying a valid hash for a malicious file, an attacker can trick the service into believing the file is trustworthy, leading to the execution of arbitrary code within the Nomad Branch service context.

Recommendations Update TeamViewer DEX Client to version 25.11 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-44016

Affected Products

Teamviewer Dex Client

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-44016 · Security Note
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-44016 · Vendor Advisory
• https://twitter.com/paramdhagia/status/2004850810413597084 · Twitter Post
• https://twitter.com/ThreatSynop/status/2004974389142401064 · Twitter Post
• https://t.me/CVEtracker/39468 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999132599688573264 · Twitter Post
• https://t.me/cveNotify/145426 · Telegram Post
• https://twitter.com/CveFindCom/status/1999096650455740468 · Twitter Post
• https://twitter.com/CVEnew/status/1999108860938985780 · Twitter Post