Executive brief
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
Affected products
- Zoom Rooms
Junglewise Threat Intelligence
CVE-2025-67461: External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure o
CVE-2025-67461 · Severity: medium · CVSS 5 · Published 2025-12-10
Technologies: Zoom Rooms. Vendors: Zoom.
Related threats
- Zoom Clients use-after-free in annotator function
- Zoom Rooms for Windows privilege escalation in installer
- Zoom Clients for Windows privilege escalation
- Zoom Rooms for Windows privilege escalation in Kiosk Mode
- Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an es