Riskcovery

CVE-2025-44016

File Hash Validation Bypass in NomadBranch.exe

State
Published
Severity
8.8 High
Published
Dec 11, 2025
Updated
Dec 11, 2025
Reserved
Apr 30, 2025

Read the record on cve.org

Description

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTV

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
DEXTeamViewer
  • before 25.11.0.29Affected
  • 25.9.0.46 and earlierAffectedfrom HF-PLTPKG-524Not affected
  • 25.5.0.53 and earlierAffectedfrom HF-PLTPKG-526Not affected
  • 24.5.0.69 and earlierAffectedfrom HF-PLTPKG-525Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.