A vulnerability marked as critical has been reported in Zoom Workplace and Meeting SDK. The affected element is an unknown function of the component Custom URL Scheme Handler. This manipulation causes improper authorization in handler for custom url scheme.

This vulnerability is tracked as CVE-2026-53408. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.