AnswersPublished16 sources
How Neoverse Traced a Zoom RCE to an Outdated pjproject Library
Neo announced on November 12, 2026, that Neoverse agents found a critical remote code execution flaw in Zoom for Windows, macOS, iOS and Android. Neo says its agent analyzed a stripped commercial binary and identified an outdated third party component; human researchers validated the attack path across four platform...
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- Neo announced on November 12, 2026, that Neoverse agents found a critical remote code execution flaw in Zoom for Windows, macOS, iOS and Android.
- Neo says its agent analyzed a stripped commercial binary and identified an outdated third party component; human researchers validated the attack path across four platforms.[2][6]
- Zoom says users should update to the latest software and that it does not provide individualized impact guidance or additional vulnerability details through its security bulletins.[26]
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What did Neo announce on November 12 via GlobeNewswire about its autonomous Neoverse agents discovering a critical remote code execution vul. Article summary: On November 12, 2026, Neo announced via GlobeNewswire that its autonomous Neoverse research agents had identified a critical remote-code-execution flaw in Zoom, with human researchers validating the remote attack path ac. Topic tags: general, general web. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clic
Neo announced on November 12, 2026, that its Neoverse autonomous research agents had identified a critical remote-code-execution flaw in Zoom clients. Neo said its researchers validated the reported attack path across Windows, macOS, iOS and Android. The issue was reported in versions earlier than 7.2.0; Zoom’s release notes show that version 7.2.0 was released on September 18, 2026.3
6
42
What Neo reported
Neo’s announcement described an exploitable flaw that remained reachable in Zoom even though the underlying third-party library had been patched earlier in 2026. Neo’s technical write-up says its autonomous agent analyzed a stripped commercial binary, identified a component with a previously patched critical flaw and determined that the vulnerability was still reachable in the application.2
6
A secondary technical report identifies the embedded library as pjproject 2.14.1 and associates the issue with CVE-2026-25994. It describes an overly long ICE username sent by a call participant as part of the reported attack path.4 The available announcement and excerpts do not independently establish every implementation detail, such as the specific buffer size, exact overwrite mechanics or a CVSS score, so those details should not be treated as confirmed here.
Where the agents’ work ended and researchers’ began
Neo’s announcement distinguishes automated discovery from human validation: Neoverse agents identified the vulnerable component and remote attack path, while Neo researchers validated the path across four platforms.6 That is evidence of a combined research workflow, not a claim that the agents alone completed every step of exploit development, disclosure and remediation.
The case also illustrates why an upstream library fix does not automatically fix every product that uses that library. Neo said the vulnerability had been patched upstream but remained reachable in Zoom’s shipped software.2
6 Downstream products must incorporate and distribute relevant library updates before users receive the fix.
Affected versions and what users should do
The available reporting identifies Zoom client versions earlier than 7.2.0 as affected and recommends updating to 7.2.0 or later.3
6 Zoom’s release notes list 7.2.0 for Windows, macOS, Android and iOS, with a September 18, 2026 release date.
42 Zoom’s general security-bulletin guidance recommends using the latest version to receive the latest fixes and security improvements.
26
Zoom also states that its security bulletins do not provide guidance on how a vulnerability affects individual customers or additional details about a vulnerability.26 That limits what can be independently confirmed from Zoom’s public bulletin materials about the specific flaw described by Neo.
What the report does—and does not—confirm
The available sources support the announcement date, the four named client platforms, Neo’s description of binary analysis and human validation, and the recommendation to update.2
3
6
42 They do not provide enough detail to verify the full technical exploit chain or the specific disclosure and remediation timeline. The clearest takeaway is narrower: according to Neo, autonomous analysis helped locate a previously patched component in a commercial application, and human researchers then checked the reported attack path across platforms.
2
6
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "How Neoverse Traced a Zoom RCE to an Outdated pjproject Library"?
Neo announced on November 12, 2026, that Neoverse agents found a critical remote code execution flaw in Zoom for Windows, macOS, iOS and Android.
What are the key points to validate first?
Neo announced on November 12, 2026, that Neoverse agents found a critical remote code execution flaw in Zoom for Windows, macOS, iOS and Android. Neo says its agent analyzed a stripped commercial binary and identified an outdated third party component; human researchers validated the attack path across four platforms.[2][6]
What should I do next in practice?
Zoom says users should update to the latest software and that it does not provide individualized impact guidance or additional vulnerability details through its security bulletins.[26]