← CVE Intelligence

CVE-2025-44016

File Hash Validation Bypass in NomadBranch.exe PUBLISHED

Description (CNA)

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.

Affected (CNA)

Vendor / productVersions
TeamViewer / DEXaffected 0 before 25.11.0.29; affected 0 through 25.9.0.46; affected 0 through 25.5.0.53; affected 0 through 24.5.0.69

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.