CVE-2025-30662

Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

State: Published
Severity: 6.6 Medium
Published: Nov 13, 2025
Updated: Feb 26, 2026
Reserved: Mar 24, 2025

Description

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N	Zoom

Weaknesses

CWE-646 Reliance on File Name or Extension of Externally-Supplied File

Affected Products

Product	Versions
Zoom Workplace VDI Plugin macOS Universal installerZoom Communications Inc.	see referencesAffected

References

https://www.zoom.com/en/trust/security-bulletin/zsb-25045

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.