This vulnerability (CVE-2026-53406) affects Zoom Communications' Remote Control for Zoom Contact Center on Windows platforms prior to version 7.0.0. It is classified under CWE-345, indicating insufficient verification of data authenticity. An authenticated user with local access could exploit this flaw to escalate privileges, potentially gaining higher-level access than intended. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that the attack requires local access with low complexity and privileges but results in high impact on confidentiality, integrity, and availability. The vendor has not yet provided a remediation level or patch information, and no known exploits have been reported.

An authenticated local user may exploit this vulnerability to escalate privileges, potentially compromising system confidentiality, integrity, and availability. This could allow unauthorized actions or access beyond the user's original permissions within the affected Zoom Contact Center Remote Control application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for unusual privilege escalations related to the affected software.