Local Privilege Escalation Vulnerability in Cato Networks CatoClient for Linux
CVE-2025-7012

8.6HIGH

Key Information:

Vendor

Cato Networks

Status
Cato Client
Vendor
CVE Published:
13 July 2025

What is CVE-2025-7012?

Cato Networks' CatoClient for Linux, prior to version 5.5, contains a vulnerability that permits local attackers to escalate their privileges to root level. This issue arises from improper handling of symbolic links, allowing an attacker to exploit the flaw and gain elevated permissions. Organizations using affected versions should update their software to mitigate potential risks associated with unauthorized access to system resources.

Affected Version(s)

Cato Client Linux 5.0 < 5.5

References

https://support.catonetworks.com/hc/en-us/articles/285525...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-7012 : Local Privilege Escalation Vulnerability in Cato Networks CatoClient for Linux