TeamViewer DEX Vulnerabilities Let Attackers Trigger DoS Attack and Expose Sensitive Data

Multiple critical and medium vulnerabilities were disclosed in TeamViewer DEX Client's NomadBranch (NomadBranch.exe); the most severe (CVE-2025-44016, CVSS 8.8) can bypass file integrity checks to enable arbitrary code execution, while other flaws can cause DoS or force the service to send data to arbitrary internal IPs. All issues require adjacent network access, have been patched in TeamViewer 25.11 and selected hotfixes for legacy branches, and systems with NomadBranch disabled or using the DEX Essentials add-on are unaffected.