Local privilege escalation vulnerabilities in Zscaler Client Connector allow unprivileged users to gain elevated system rights, posing a significant risk to endpoint security.

This vulnerability involves the improper handling of permissions and privileges. An unprivileged user can exploit this weakness to execute arbitrary code within a privileged context, effectively bypassing system-level security constraints.

Successful exploitation allows an attacker to escalate privileges to the level of the Zscaler service, which typically runs with high system rights. Given the CVSS score of 8.8, this vulnerability represents a major risk, as it allows for complete system takeover or the disabling of security software on the endpoint.

Immediate Action: Update Zscaler Client Connector to the latest recommended versions for Windows, MacOS, and Linux to resolve the privilege escalation flaws.

Proactive Monitoring: Monitor for suspicious process execution or attempts by standard users to access sensitive system files or restricted application directories.

Compensating Controls: Implement strict endpoint hardening and principle of least privilege policies to limit the capabilities of standard users on shared or multi-user systems.

Public Exploit Available: Unknown.

Due to the high severity and the potential for privilege escalation, organizations should prioritize updating all Zscaler Client Connector installations. Rapid deployment is essential to prevent local users from compromising the security posture of managed endpoints.