This vulnerability in TeamViewer affects the Full Client, Host, and related modules across Windows, Linux, and macOS platforms. It involves improper access control that permits an authenticated remote attacker to bypass the victim's user-configured permission settings during session establishment. By exploiting this flaw, the attacker can alter access control parameters for features that should be restricted, thereby executing actions that the victim explicitly denied. This can escalate to unauthorized actions and may lead to remote code execution on the compromised system. The CVSS 3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

An authenticated remote attacker can bypass user-configured permission settings in TeamViewer, enabling unauthorized actions that the victim intended to restrict. This can lead to significant compromise including potential remote code execution, affecting confidentiality, integrity, and availability of the target system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to TeamViewer sessions to trusted users only and monitor for unusual activity. Avoid exposing TeamViewer services to untrusted networks.