Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026