CVE-2025-46266
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability in TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) prior to version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
Risk Assessment
Risk of sensitive data leakage to unauthorized internal IP addresses, potentially compromising organizational confidentiality.
Recommendation
Update TeamViewer DEX Client to version 25.11 or later, which includes the fix.
Other vulnerabilities in TeamViewer DEX Client
See all- CVE-2025-44016High
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
- CVE-2025-12687Medium
TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) versions prior to 25.11 for Windows contains a vulnerability. It allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.
Original NVD description (English source)
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS