CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation

What is CVE-2025-46788?

CVE-2025-46788 is a high-severity vulnerability in Zoom Workplace Desktop, published on 10 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.

Weakness: CWE-295

Which versions are affected by CVE-2025-46788?

It affects 1 product.

Products include Zoom Workplace Desktop.

How do I fix CVE-2025-46788?

No fix has been published for CVE-2025-46788 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-46788 being exploited?

There is no known exploitation of CVE-2025-46788 in the wild and no public exploit code.

Other vulnerabilities in Zoom Workplace Desktop

• CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation Critical 9.8
• CVE-2026-30903 Path traversal in Zoom Workplace Critical 9.6
• CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element Medium 6.6
• CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation Medium 5.5

All Zoom Workplace Desktop vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3r3x-m8v7-gpp4.