CVE-2025-54983
MediumCVSS 5.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, under specific circumstances was not released after use, allowing traffic to potentially bypass ZCC forwarding controls.
Risk Assessment
An attacker could exploit the open port to bypass Zscaler Client Connector security policies, potentially leading to unauthorized network access. The risk affects organizations using Zscaler Client Connector in the specified versions.
Recommendation
Update Zscaler Client Connector on Windows to version 4.6.0.216 or later (for the 4.6 branch) and 4.7.0.47 or later (for the 4.7 branch).
Other vulnerabilities in Zscaler Client Connector
See all- CVE-2026-59568Critical
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
- CVE-2026-59564Critical
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
- CVE-2026-59570High
On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.
- CVE-2026-59569High
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.
- CVE-2026-25687High
A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a heap corruption, resulting in a denial of service (client crash) and potentially arbitrary code execution in the context of the ZCC process.
- CVE-2026-59567High
Multiple vulnerabilities in Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.
- CVE-2026-59566High
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on Zscaler Client Connector on Android and ChromeOS.
- CVE-2026-59565High
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on Zscaler Client Connector on Windows.
- CVE-2026-22569Medium
An incorrect startup configuration of Zscaler Client Connector on Windows may cause a limited amount of traffic to bypass inspection under rare circumstances.
Original NVD description (English source)
A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS