Read the docs
TI-2026-42531 Aliases CVE-2026-59569GHSA-4vcv-p436-xxwh

Android ZCC VPN API method privilege escalation

Priority LOW 36CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00176 7th percentileScored 2026-11-07
Fix Fixed Client Connector (Zscaler): Android: 4.2.0.152, ChromeOS: 4.2.0.152

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ZscalerClient Connectorbefore Android: 4.2.0.152; before ChromeOS: 4.2.0.152Android: 4.2.0.152, ChromeOS: 4.2.0.152Patch availableCNA
  • Client Connector VendorZscaler Affected before Android: 4.2.0.152; before ChromeOS: 4.2.0.152 Fixed in Android: 4.2.0.152, ChromeOS: 4.2.0.152 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:*:*:*——Zscaler
  • cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:*:*:* Versions — — ·Zscaler

Remediation

  • Fix · CNA Client Connector (Zscaler) Fixed in Android: 4.2.0.152, ChromeOS: 4.2.0.152

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Zscaler Client Connector Android: 4.2.0.152, ChromeOS: 4.2.0.152

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-59569
  2. 2026-10-03 Alias added: GHSA-4vcv-p436-xxwh

References

Other 1

  • TI-2023-22133 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local… CVSS 3.1MEDIUM 5.5
  • TI-2026-42530 Remote code execution in Zscaler Client Connector CVSS 3.1CRITICAL 9.1
  • TI-2026-42526 Authentication bypass between ZCC and client connector portal CVSS 3.1CRITICAL 9.1
  • TI-2020-09334 The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer… CVSS 3.1CRITICAL 9.8
  • TI-2024-15528 Local Privilege Escalation via lack of input validation CVSS 3.1CRITICAL 9.8
  • TI-2025-34691 SAML 2.0 Public Key Validation Issue CVSS 3.1CRITICAL 9.6
See all 58 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences