CVE-2026-53416

Published: Aug 11, 2026Modified: Aug 28, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: security@zoom.us (Secondary)

Description

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.

Related CWEs

Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-26017

Source: security@zoom.us

Timeline

No history available yet.