CVE-2025-44016

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.

CVSS 3.1

8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-25)

CWE

CWE-20

Published

2025-12-11

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• teamviewer:digital_employee_experience

References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/

Check your stackJSON