PT-2026-24423 · Zoom Communications+1 · Zoom Workplace+2

Published

2026-03-10

·

Updated

2026-05-14

·

CVE-2026-30903

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Zoom Workplace for Windows versions prior to 6.6.0
Description The issue involves external control of the file name or path within the Mail feature. This can allow an unauthenticated user to escalate privileges through network access. The vulnerability is present in Zoom Workplace for Windows before version 6.6.0. No information is available regarding the number of potentially affected devices or real-world exploitation incidents. The vulnerable component is the Mail feature, and the issue stems from improper handling of file names or paths provided by external sources. The filename or filepath parameters may be involved in this issue.
Recommendations Versions prior to 6.6.0 should be updated to version 6.6.0 or later.

Fix

LPE

Weakness Enumeration

CWE-610CWE-73

Related Identifiers

CVE-2026-30903

Affected Products

Zoom Workplace
Workplace Desktop
Workplace Virtual Desktop Infrastructure