Local Privilege Escalation in Versa SASE Client for Windows

CVE-2025-34290

What is CVE-2025-34290?

The Versa SASE Client for Windows versions between 7.8.7 and 7.9.4 features a vulnerability in its audit log export functionality that allows local authenticated attackers to escalate their privileges. This arises from improper handling of user-controlled file paths within a privileged service, leading to potential exploitation via time-of-check time-of-use issues. Attackers can manipulate symbolic links and mount points to delete arbitrary directories with SYSTEM privileges, which may include sensitive system folders. This vulnerability emphasizes the critical importance of secure privilege management in software design to prevent unauthorized access and alterations.

References