PT-2025-46918 · Unknown+1 · Jitsi Meet+1

Published 2025-11-13 · Updated 2025-11-14 · CVE-2025-64754

Positive Technologies (AI Summary)

CVSS v4.0

2.7

Low

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Jitsi Meet versions prior to 2.0.10532

Description Jitsi Meet is a video conferencing application. A flaw exists that allows attackers to hijack the OAuth authentication window for Microsoft accounts. This issue does not have any known workarounds.

Recommendations Update Jitsi Meet to version 2.0.10532 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-64754

GHSA-5FX7-WGCR-FJ78

Affected Products

Jitsi Meet

Account

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64754.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-64754 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64754 · Security Note
• https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-5fx7-wgcr-fj78 · Note
• https://t.me/CVEtracker/37302 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1989174148451504566 · Twitter Post
• https://twitter.com/CVEnew/status/1989194842514317690 · Twitter Post