Nigeria’s National Information Technology Development Agency (NITDA) has issued a security advisory warning Zoom users about a critical vulnerability that could allow cybercriminals to remotely hijack accounts without requiring valid login credentials.
The alert was released by the NITDA Computer Emergency Readiness and Response Team (NITDA-CERRT) regarding the flaw tracked as CVE-2026-53412. According to the agency, the vulnerability stems from improper input validation, allowing an unauthenticated attacker to execute remote account takeovers over a network.
NITDA-CERRT warned that an exploit could grant unauthorized access to confidential video meetings, chat histories, cloud recordings, and shared enterprise files. Additionally, compromised accounts could expose sensitive government, corporate, or personal data, enabling attackers to impersonate legitimate users for phishing, fraud, and social engineering campaigns.
The security flaw impacts Zoom Workplace for Windows and the Zoom Workplace Virtual Desktop Infrastructure (VDI) Client for Windows.
To mitigate the risk, NITDA-CERRT urged users and administrators to apply security updates immediately. Users of Zoom Workplace for Windows should upgrade to version 7.0.0 or later, while users of the Zoom Workplace VDI Client for Windows are advised to upgrade to version 7.0.10, 6.6.15, or 6.5.18, depending on their supported release branch.
The agency further advised organizations to enforce multi-factor authentication (MFA) across all Zoom accounts, restrict administrative privileges following the principle of least privilege, maintain rigorous patch management procedures, and actively monitor authentication logs for unauthorized access attempts.