CVE-2025-44016
High
Description
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Teamviewer Digital Employee Experience
PublishedDec 11, 2025
First seenDec 11, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- teamviewer digital_employee_experience25.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamviewer digital_employee_experience | v < 25.11 | 25.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.