VULNERABILITY INTELLIGENCE

CVE-2025-64754

EPSS probability0.41%
CISA KEVNot currently listed
Published2025-11-13
Last modified2026-10-18

Description

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available.

Weakness classification

  • security-advisories@github.com: CWE-601

Primary references