OAuth Authentication Vulnerability in Jitsi Meet by Jitsi
CVE-2025-64754

2.7LOW

Key Information:

Vendor

Jitsi

Status
Jitsi-meet
Vendor
CVE Published:
13 November 2025

What is CVE-2025-64754?

A vulnerability in Jitsi Meet, an open-source video conferencing application, allows attackers to hijack the OAuth authentication window for Microsoft accounts in versions prior to 2.0.10532. This poses a significant risk to user accounts, potentially enabling unauthorized access to sensitive information. The issue has been resolved in version 2.0.10532, and users are encouraged to upgrade immediately as there are no known workarounds for this vulnerability.

Affected Version(s)

jitsi-meet < 2.0.10532

References

https://github.com/jitsi/jitsi-meet/security/advisories/G...
x_refsource_CONFIRM

CVSS V4

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-64754 : OAuth Authentication Vulnerability in Jitsi Meet by Jitsi