CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-7012

Cato Networks Linux Client Local Privilege Escalation via Symlink

Status: Published
Published: 2025-07-13
Updated: 2025-07-14
Assigning organization: Cato

Description

An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cato Networks Cato Client

Default version status: unaffected

5.0 to < 5.5affected

References

https://support.catonetworks.com/hc/en-us/articles/28552501717405-CVE-2025-7012-Linux-Client-Local-Privilege-Escalation-via-Symbolic-Link-Handling ↗