TeamViewer DEX Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in TeamViewer DEX (formerly 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. This vulnerability arises from improper input validation, which allows authenticated attackers with actioner privileges to execute elevated arbitrary commands on connected hosts by injecting malicious commands into the instruction's input field. Users of the 1E Client version 24.5 or higher are not affected.

Impact

Exploitation of this vulnerability allows for command injection, enabling authenticated attackers to execute arbitrary commands with elevated privileges on the affected host.

Remediation

To address this vulnerability, users should update to 1E Client version 26.1 or higher and remove the 1E-Nomad-RunPkgStatusRequest instruction from the DEX Portal.