CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-3886

CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

Status: Published
Published: 2025-04-27
Updated: 2025-04-28
Assigning organization: Cato

Description

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cato Networks SDP Client

Default version status: unaffected

0 to < 5.8.0affected

References

https://support.catonetworks.com/hc/en-us/articles/26903049677597-Security-Vulnerability-CVE-2025-3886-that-Impacts-macOS-Client-Versions-Lower-than-5-8 ↗