This vulnerability in TeamViewer Full Client (versions >=15.0 and <15.82) involves improper access control (CWE-284) that permits an authenticated remote attacker to bypass permission settings configured by the user during session establishment. By exploiting this flaw, the attacker can alter access control parameters for features that should be restricted, enabling unauthorized actions. The vulnerability affects Windows, Linux, and macOS platforms. The CVSS v3.1 score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker who successfully exploits this vulnerability can bypass user-configured permission restrictions and perform unauthorized actions on the target system. This may lead to remote code execution, compromising confidentiality, integrity, and availability of the affected system. The vulnerability affects multiple operating systems and could allow significant control over the victim's machine.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor TeamViewer's official channels for updates. Until a fix is available, restricting access to TeamViewer sessions and enforcing strong authentication may reduce risk.