This vulnerability in Zscaler Client Connector arises from improper handling of insufficient permissions or privileges (CWE-280). Multiple vulnerabilities collectively enable local privilege escalation, allowing an attacker with limited privileges on the affected system to execute arbitrary code in a privileged context. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation results in local privilege escalation, granting an unprivileged user the ability to execute arbitrary code with elevated privileges. This can lead to full system compromise, including complete control over the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local user access to trusted personnel only and monitor for suspicious local activity related to privilege escalation attempts.