CVE-2025-3886

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 362

Summary

CVE-2025-3886 is a privileges escalation vulnerability affecting CatoNetworks CatoClient versions prior to 5.8.0. This issue arises from a race condition (TOCTOU) in the PrivilegedHelperTool component, enabling attackers to escalate their privileges and gain unauthorized access to sensitive data or functionality. Successful exploitation of this vulnerability could lead to significant security implications for affected systems. Organizations using CatoClient are advised to upgrade to the latest version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share