CVE Intelligence

Jitsi vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jitsi products: 1 record(s), with severity, exploitation and fixes.

Jitsi-meet 1

Exploited only (KEV) →

CVE-2025-64754 Low · 2.7 CWE-601 Nov 13, 2025
Jitsi Meet has DOM Redirect on Microsoft OAuth Flow
Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available.