CVE-2025-46788 is a high severity improper certificate validation flaw (CVSS 7.4) in Zoom Workplace for Linux before version 6.4.13. The record says an unauthorized user with network access may be able to disclose information. Update every Linux client to 6.4.13 or later and read Zoom security bulletin ZSB-25023.
What's affected
The NVD record, published by Zoom, says Zoom Workplace for Linux before version 6.4.13 is affected. Version 6.4.13 is the first fixed release according to the record.
The record points to Zoom security bulletin ZSB-25023. The bulletin link in the record is malformed, with a doubled protocol prefix, so use the Zoom trust center to find the bulletin by its number.
How to check if you're exposed
Check the Zoom client version on Linux machines.
- In the Zoom client, open the profile menu, choose Settings and then About to read the version.
- On Debian and Ubuntu systems, run
dpkg -l | grep -i zoom. - On Red Hat based systems, run
rpm -qa | grep -i zoom. - Use your endpoint management tool to list the installed Zoom version across your Linux fleet.
Anything older than 6.4.13 is in the affected range.
What to do now
- List Linux machines that have Zoom Workplace installed, including developer laptops.
- Update to version 6.4.13 or later from Zoom's official download page or your distribution's managed repository.
- Turn on automatic updates in Zoom where your policy allows it.
- Avoid joining sensitive meetings over untrusted networks, such as public Wi-Fi, until the client is updated.
- Read bulletin ZSB-25023 in the Zoom trust center for the supplier's wording.
- Add the Zoom client to your standard software inventory so version checks are routine.
Why it matters
The record lists CWE-295 (Improper Certificate Validation). Certificate validation is how a client confirms that it is talking to the right server. When it is skipped or done wrongly, a person in the network path can pose as the server and read what the client sends.
The vector shows high attack complexity, which keeps the score at 7.4, because the attacker needs a position on the network path. Conferencing clients carry meeting content and credentials, so the information at stake can be sensitive. The record does not mark this CVE as exploited in the wild, and it is not on the CISA Known Exploited Vulnerabilities list.
Quick check
Which version fixes it?
Zoom Workplace for Linux 6.4.13, according to the record.
Does this affect Windows or macOS?
The record names only Zoom Workplace for Linux. Check the Zoom bulletin for other platforms.
Sources
Last reviewed: 18 October 2026.
