CVE-2025-7012CWE-59

Cato Networks Linux Client Local Privilege Escalation via Symlink

High · published July 13, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/RE:M/U:Green
EPSS
0.00174 · 6.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-07-13T08:12Z
EPSS history
Timeline
  • 13 JUL 08:12Z
    Cato Networks Linux Client Local Privilege Escalation via Symlink
    cvelistv5