EUVD-2026-64860
GHSA-r7wr-wrcm-fj8q
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Authentication bypass over the network channel needs no privileges or interaction (AV:N/AC:L/PR:N/UI:N); it compromises confidentiality and integrity of trust but not availability (A:N).
Primary rating from Vendor (Zscaler).
CVSS VectorVendor: Zscaler
Lifecycle Timeline
2DescriptionCVE.org
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
AnalysisAI
Authentication bypass in Zscaler Client Connector allows remote unauthenticated attackers to subvert the trust between the endpoint agent and the Zscaler Client Connector Portal, per the CVSS vector (AV:N/PR:N) yielding high confidentiality and integrity impact. The flaw (CWE-304) stems from a missing or incorrect step in the authentication logic governing agent-to-portal communications, affecting Windows, macOS, Linux, iOS, Android, and ChromeOS builds below the fixed versions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The vulnerable interaction is the authenticated communication channel between the Zscaler Client Connector agent and the Zscaler Client Connector Portal; exploitation requires network reach to that channel and a connector running a version below the per-platform fix level (e.g., Windows < 4.6.0.457/4.7.0.317/4.8.0.232/4.9.0.372, macOS < 4.5.2.312/4.7.0.292/4.8.0.191, Linux < 3.7.2.64/4.2.1.64, iOS < 4.5.1, Android < 4.2, ChromeOS < 4.2). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals point to a serious, high-priority issue: CVSS 9.1 with AV:N, AC:L, PR:N, and UI:N describes network-reachable, low-complexity, unauthenticated exploitation, and CWE-304 authentication bypasses are frequently reliable once understood. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Zscaler Client Connector to a fixed release for each platform: Windows 4.6.0.457 / 4.7.0.317 / 4.8.0.232 / 4.9.0.372, Linux 3.7.2.64 / 4.2.1.64, macOS 4.5.2.312 / 4.7.0.292 / 4.8.0.191, iOS 4.5.1, ChromeOS 4.2, and Android 4.2 (Patch available per vendor advisory - confirm the exact target build for your deployment branch against https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: execute complete inventory of Zscaler Client Connector deployments across all platforms, document all installed versions, and activate detailed logging of agent-to-portal communications. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Client Connector
View allDHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection.2. Rated cri
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allow
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution.2. Rated critical severity (CVSS
An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation.4.0.105. Rat
Remote code execution in Zscaler Client Connector (ZCC) lets a remote, unauthenticated attacker run arbitrary code withi
Remote buffer overflow in Zscaler Client Connector on Windows enables a network-accessible attacker with low privileges
Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arb
Buffer overflow in Zscaler Client Connector on Android and ChromeOS allows local exploitation to trigger a denial-of-ser
Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repa
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrar
While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks,
Same weakness CWE-304 – Missing Critical Step in Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today