Client Connector
CVE-2025-54983: Health check port on ZCC allows tunnel bypass
A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Zscaler Client Connector (Windows) 4.6 | 4.6.0.216 or later |
| Zscaler Client Connector (Windows) 4.7 | 4.7.0.47 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.