MEDIUM · 4.3

CVE-2025-46266

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmit...

Vulnerability Description

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TeamviewerDigital Employee Experience< 25.11
MicrosoftWindows-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-46266?

CVE-2025-46266 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmit...

How severe is CVE-2025-46266?

CVE-2025-46266 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-46266?

Check the references section above for vendor advisories and patch information. Affected products include: Teamviewer Digital Employee Experience, Microsoft Windows.