Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

CVE-ID

CVE-2026-12703

Description

TeamViewer Remote Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

 

Successful exploitation requires the attacker to be authenticated and to possess device management permissions for pre-authenticated macOS devices.

 

For customers using Conditional Access, please note that this issue does not represent a bypass of TeamViewer Conditional Access policies themselves.

 

The vulnerability has been fixed with version 15.80 and additional versions listed below. We recommend updating to the latest available version.

 

At the time of publication, we are not aware of any prior public disclosure of this issue or any indication of exploitation in the wild.

CVSS3.1 Score

Base Score 8.0 (High)

CVSS3.1 Vector String

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Problem type

CWE-288: Authentication Bypass Using an Alternate Path or Channel