CVE-2025-7012

An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling.

Scoring

Severity

HIGH

CVSS base score

8.6

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/RE:M/U:Green

EPSS probability

0.15%

CWE

CWE-59

Published

2025-07-13

Last modified

2026-03-12

Affected products

• Cato Networks Cato Client

Weakness type

• CWE-59

Related vulnerabilities

• CVE-2026-87766 — Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
• CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
• CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
• CVE-2026-69425 — Windows NTFS Tampering Vulnerability
• CVE-2026-69289 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability
• CVE-2026-83999 — Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
• CVE-2026-70563 — Windows Shell Spoofing Vulnerability
• CVE-2026-69771 — Windows Container Manager Service Security Feature Bypass Vulnerability

Markdown version · Browse all CVEs