Skip to content
OpenAdvisories
High · 7.8 CVE-2026-30905 EUVD-2026-30111GHSA-xg43-qr5w-q4jr

External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authe…

Published May 13, 2026 · Updated May 15, 2026 · Assigned by Zoom

Description

External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
Zoom Communications Zoom Workplace VDI Plugin < 6.6.11 6.6.11

Advisories 1

References