CVE-2026-92371 describes an improper path validation vulnerability in TeamViewer Full Client and Host for Linux before version 15.82. The flaw exists in the Cloud Session Recording functionality, where a race condition during path validation and subsequent file access can be exploited by a local authenticated attacker. This exploitation may lead to privileged file operations in unintended locations on the system, potentially compromising confidentiality, integrity, and availability.

The vulnerability allows a local authenticated attacker to perform privileged file operations outside of intended paths, which can lead to high impact on confidentiality, integrity, and availability of the affected system. This could enable unauthorized modification or access to sensitive files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 15.82, upgrading to version 15.82 or later is recommended once confirmed by the vendor. Until then, restrict local access to trusted users only.