CVE-2025-67461
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to disclose information via local access.
Risk Assessment
An authenticated user may access sensitive information by manipulating file names or paths, potentially compromising data confidentiality.
Recommendation
Update Zoom Rooms for macOS to version 6.6.0 or later to mitigate the vulnerability.
Other vulnerabilities in Zoom Rooms
See all- CVE-2026-53409High
Improper privilege management in Zoom Rooms for Windows before version 7.1.0 allows an authenticated user to escalate privileges via local access.
- CVE-2025-67460High
A protection mechanism failure of software downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
Original NVD description (English source)
External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS