medium4.1
CVE-2025-58132
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Impact
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoom | Meeting Software Development Kit | before 6.5.5 |
| Zoom | Rooms | before 6.5.5 |
| Zoom | Workplace Desktop | before 6.5.5 |
| Zoom | Workplace Virtual Desktop Infrastructure | before 6.3.15 from 6.4.0 before 6.4.13 |