Nigeria’s National Information Technology Development Agency has warned Zoom users about a critical security flaw that could allow hackers to take control of accounts without a valid password
The warning came from the National Information Technology Development Agency’s Computer Emergency Readiness and Response Team (NITDA-CERRT), which identified the vulnerability as CVE-2026-53412.
The flaw affects Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows and has been assigned a 9.8 rating out of 10, placing it among critical security vulnerabilities.
NITDA said attackers could exploit the flaw to gain unauthorised control of affected accounts without having the users’ login credentials.
Once an account is compromised, attackers could potentially gain access to private meetings, chats, recordings and files shared through the platform.
The vulnerability reportedly stems from an input validation weakness in the affected Zoom software.
The risk is particularly serious for companies and institutions that use Zoom to conduct confidential meetings or exchange sensitive business information.
Zoom has released security patches to address the problem, with the company listing the vulnerability among its critical security issues affecting Windows users.
NITDA is advising users and organisations running the affected versions of Zoom to update their software immediately and install the latest security patches on all relevant devices.
The agency’s warning comes amid growing cybersecurity threats targeting widely used communication and collaboration platforms.
See also: FG Launches Central Portal for Nigerians to Access Government Services
Zoom has addressed several other security vulnerabilities in its Windows clients and related products this year, including flaws that could allow privilege escalation and other forms of unauthorised access.
For Nigerian businesses and institutions that rely on Zoom for remote meetings and digital collaboration, the latest alert highlights the importance of keeping software updated.
NITDA urged users totreat security updates as an important part of protecting their digital accounts, particularly when applications have access to private conversations, business files and other sensitive data.
About the Author
Cecilia Attah is a tech analyst with a degree from Benue State University. She covers tech news and startups at TechRegard with a focus on how technology is transforming Africa and shaping the global landscape.
