---
id: CVE-2026-92376
title: >-
  Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote
  Management Monitoring for Windows
summary: |-
  Improper authentication in the
  inter-process communication (IPC) mechanism of TeamViewer Remote Management
  Monitoring for Windows prior to version 26.10.1 allows a local authenticated
  attacker with low privileges to impersonate the IPC b…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-287
vendor: TeamViewer
product: Remote Management - Monitoring
affected:
  - remote_management_-_monitoring < 26.10.1
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T15:11:08.772Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-92376'
references:
  - url: >-
      https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/
tags:
  - cve.org
ingestedAt: '2026-10-27T16:11:59.464Z'
---

## Overview

Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and cause the
Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM
privileges, resulting in local privilege escalation.

## Affected

- `remote_management_-_monitoring < 26.10.1`

## Remediation

Update to the latest available version.