CVE-2025-46266

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Dec 11, 2025

CISA due date

—

The record

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

Affected packages

Ecosystem	Package	Introduced	Fixed