PT-2025-46835 · Zoom Communications+1 · Zoom Workplace Vdi Plugin Macos Universal Installer+1

Published 2025-11-13 · Updated 2026-01-09 · CVE-2025-30662

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zoom Workplace VDI Plugin versions 6.3.0 through 6.3.13 Zoom Workplace VDI Plugin versions 6.4.0 through 6.4.13 Zoom Workplace VDI Plugin versions 6.5.0 through 6.5.9

Description The installer for the Zoom Workplace VDI Plugin on macOS is susceptible to a flaw related to symlink following. This issue, present in versions prior to 6.3.14, 6.4.14, and 6.5.10, could allow an authenticated user to disclose information through network access.

Recommendations Update to Zoom Workplace VDI Plugin version 6.3.14 or later. Update to Zoom Workplace VDI Plugin version 6.4.14 or later. Update to Zoom Workplace VDI Plugin version 6.5.10 or later.

Fix

Weakness Enumeration

CWE-646

Related Identifiers

CVE-2025-30662

Affected Products

Zoom Workplace Vdi Plugin Macos Universal Installer

Workplace Virtual Desktop Infrastructure

References · 4

• https://zoom.com/en/trust/security-bulletin/zsb-25045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30662 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30662 · Vendor Advisory
• https://t.me/cveNotify/148315 · Telegram Post