TeamViewer Full Client and Host for Linux prior to version 15.82 contain a CWE-59 improper link resolution vulnerability in the Cloud Session Recording (CSR) feature. This flaw arises from a race condition during path validation and subsequent file access, enabling a local authenticated attacker with low privileges to cause privileged file operations at unintended file system locations. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

An attacker with local authenticated access can exploit this vulnerability to perform privileged file operations in unintended locations, potentially leading to unauthorized modification or disclosure of sensitive files and disruption of system availability. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor TeamViewer advisories for updates addressing this vulnerability. Until a fix is available, limit local authenticated access to trusted users and consider disabling the Cloud Session Recording functionality if feasible.