vulnerability

Zscaler Client Connector: CVE-2023-41971: Improper Link Resolution Before File Access

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:S/C:N/I:P/A:C)

Published

May 2, 2024

Added

Jun 5, 2025

Modified

Jun 17, 2026

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.

Solution

zscaler-client-connector-update-latest

References

CVE-2023-41971
https://attackerkb.com/topics/CVE-2023-41971
CWE-59
EUVD-EUVD-2023-46430
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-46430

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report