CVE-2026-12703 is a high-severity authentication bypass vulnerability (CWE-288) in TeamViewer Remote for macOS version 15.00. The flaw is a business logic error that permits an authenticated attacker to circumvent the configured 2FA in the Connections approval process when using Unattended Access, allowing unauthorized remote access to the affected system. The vulnerability affects only version 15.00 of the software. No official patch or remediation guidance has been published by the vendor as of the data provided.

Successful exploitation allows an attacker with valid authentication to bypass two-factor authentication protections and establish a remote connection to the macOS host, potentially leading to full confidentiality, integrity, and availability compromise of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to TeamViewer services on affected versions and consider disabling Unattended Access or enforcing additional network-level controls to limit exposure.