← Back to CVEs
CVE-2022-50931
HIGH7.8
Description
TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access.
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published1/13/2026
Last Modified2/2/2026
Sourcenvd
Honeypot Sightings0
Affected Products
teamspeak:teamspeak
Weaknesses (CWE)
CWE-732
References
https://www.exploit-db.com/exploits/50743(disclosure@vulncheck.com)
https://www.teamspeak.com(disclosure@vulncheck.com)
https://www.teamspeak.com/en/downloads(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/teamspeak-insecure-file-permissions(disclosure@vulncheck.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.