PT-2026-40760 · Zoom Communications · Zoom Workplace Vdi Plugin

Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-30905

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2026-30905

Affected Products

Zoom Workplace Vdi Plugin

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-30905 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-26007 · Note