CVE-2025-20236

CVE-2025-20236 is a high-severity vulnerability in the custom URL parser of Cisco Webex App (formerly Webex Teams) that could allow an unauthenticated, remote attacker to execute arbitrary commands on a targeted user's host. This vulnerability stems from insufficient input validation when processing meeting invite links. An attacker could exploit this by persuading a user to click a specially crafted link, leading to the download of arbitrary files and subsequent command execution with the user's privileges. The vulnerability has a CVSS score of 8.8 (High), indicating a network attack vector with low complexity, requiring user interaction, and resulting in high impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, suggesting a high level of awareness and potential for future exploitation.