CVE-2025-41421: TeamViewer Full Client

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.

Affected products

• TeamViewer Full Client: from 11.0.0, before 15.70 (fixed in 15.70)
• TeamViewer Host: from 11.0.0, before 15.70 (fixed in 15.70)

Published 2025-10-01. Last modified 2026-06-17.