CVE-2025-44016 HIGH

CVE-2025-44016: File Hash Validation Bypass in NomadBranch.exe

Vendor Teamviewer
Product DEX
Weakness CWE-20 · Input validation
Published December 11, 2025
Last update December 11, 2025

CVSS base score

8.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.

Key dates

02Disclosure timeline

December 11, 2025 CVE published
December 11, 2025 Record updated