An incorrect startup configuration in certain versions of the Zscaler Client Connector on Windows can lead to a limited amount of traffic not being inspected. This weakness, identified as CWE-1289, results in a partial loss of visibility into network traffic, which could enable malicious data to travel through the network without detection.

The vulnerability affects the Zscaler Client Connector while running on Windows operating systems. Specific product versions are not listed in the supplied data, so all currently installed Windows builds of Zscaler Client Connector may potentially be impacted.

The CVSS score of 5.4 indicates a moderate severity, but the EPSS score of less than 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The issue likely requires the client to start with the wrong configuration, a condition that occurs only rarely according to the vendor. No known public exploitation exists at this time, suggesting the risk to organizations remains low but not negligible.