TeamViewer Remote Management Monitoring: Local privilege escalation via IPC (CVE-2026-92376)
An improper authentication vulnerability in the TeamViewer Remote Management Monitoring IPC mechanism allows local, low-privileged attackers to impersonate the IPC broker and execute arbitrary code as NT AUTHORITY\SYSTEM.
CVE search metadata
CVE search record: CVE-2026-92376. Severity: high. CVSS: 7.8. KEV: no. Product: TeamViewer Remote Management Monitoring (< 26.10.1). Brief: TeamViewer Remote Management Monitoring: Local privilege escalation via IPC (CVE-2026-92376). Brief link: https://feed.craftedsignal.io/briefs/2026-10-teamviewer-lpe-28a636ed/
Triage facts
Revision 1- Applicability
- TeamViewer Remote Management Monitoring (< 26.10.1)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Oct 27, 20:01 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
CVE-2026-92376 describes an authentication flaw in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows. An attacker with low-level local access can impersonate the IPC broker to gain SYSTEM-level execution. This vulnerability affects versions prior to 26.10.1.
Impact
Successful exploitation results in local privilege escalation, allowing an attacker to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
Recommendation
- Upgrade TeamViewer Remote Management Monitoring for Windows to version 26.10.1 or later to remediate CVE-2026-92376.
- Review local audit logs for unauthorized IPC connection attempts or service communication anomalies originating from low-privileged user contexts.
Immediate actions
Patch all instances of TeamViewer Remote Management Monitoring to version 26.10.1 or later.
Threat Hunt
Monitor for suspicious IPC communication or unexpected service restarts involving the TeamViewer Monitoring service process.
Data: Windows Event Logs (System/Application logs regarding service behavior), EDR telemetry for inter-process communication
Mitigations
Upgrade TeamViewer Remote Management Monitoring to 26.10.1.
CVE-2026-92376