Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

  • ZSB-25045
  • CVE-2025-30662
  • Medium
  • 6.6
  • CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.12, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.


Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.

  • Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.12, and 6.5.10 in their respective tracks

Reported by an anonymous researcher.

Revision Date Description
1.1 11/14/2025

Corrected affected version from 6.4.14 to 6.4.12 in the 6.4 track.
1.0 11/11/2025

Initial publication.