A high-severity privilege escalation vulnerability in Zoom Workplace for Windows, tracked as CVE-2026-30900, allows authenticated local users to gain elevated system access.

The flaw is caused by an improper check of the minimum version within the update mechanism (CWE-754). This vulnerability requires the attacker to have authenticated local access to the target system to trigger the escalation.

This vulnerability poses a significant risk to organizational endpoint security, as it allows a standard authenticated user to escalate privileges to a higher level. With a CVSS score of 7.8, the potential for total compromise of the local machine is high, which could lead to unauthorized data access, lateral movement within the network, or the installation of malicious software.

Immediate Action: Update Zoom Workplace to version 6.6.11 or later immediately to resolve the improper version check.

Proactive Monitoring: Review system logs for unusual process execution patterns or unexpected administrative actions performed by standard user accounts.

Compensating Controls: Ensure that local user permissions follow the principle of least privilege, restricting the ability of standard users to execute unauthorized installers or modify system-level configurations.

Public Exploit Available: Unknown

Given the potential for full system privilege escalation, organizations should prioritize the deployment of the 6.6.11 update across all Windows workstations running Zoom Workplace. Immediate patching is the most effective way to eliminate this risk, as local privilege escalation flaws are frequently used in the later stages of a broader cyberattack.