CVE-2025-30662

Medium · 6.5

CVSS

6.5

EPSS

0.1%

Published

Nov 13, 2025

CISA due date

—

The record

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

Affected packages

Ecosystem	Package	Introduced	Fixed