Medium severity4.1NVD Advisory· Published Oct 15, 2025· Updated Jun 17, 2026

CVE-2025-58132

Description

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.

LLM-synthesized narrative grounded in this CVE's description and references.

Zoom Video Communications, Inc./Meeting Software Development Kit
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
Range: <6.5.5
Zoom Video Communications, Inc./Rooms
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
Range: <6.5.5
Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
Range: <6.5.5
Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: <6.3.15
Zoom Video Communications, Inc./Zoom Clients for Windowsllm-create
Zoom Video Communications, Inc./Zoom Desktop Client for Windowsv5
Range: see references