Advisoriesby IbisZscalerCVE-2026-59567
Zscaler Client Connector: privilege escalation
Fix: upgrade to Windows: 4.6.0.457 or later (9 fixed versions below)
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Client Connector Product | < Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0372 | Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0372 |
| < MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191 | MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191 | |
| < Linux: 3.7.2.64, 4.2.1.64 | Linux: 3.7.2.64, 4.2.1.64 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-280