PT-2025-29365 · Cato Networks · Catoclient

Published 2025-07-13 · Updated 2025-07-13 · CVE-2025-7012

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions: CatoClient versions prior to 5.5

Description: An issue in CatoClient for Linux allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling.

Recommendations: Update CatoClient to version 5.5 or later.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2025-7012

Affected Products

Catoclient

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7012 · Security Note
• https://t.me/cvetracker/27676 · Telegram Post
• https://twitter.com/CveFindCom/status/1944315989841023106 · Twitter Post
• https://t.me/cvenotify/128737 · Telegram Post
• https://twitter.com/CVEnew/status/1944317693265322121 · Twitter Post
• https://support.catonetworks.com/hc/en-us/articles/28552501717405-CVE-2025-7012-Linux-Client-Local-Privilege-Escalation-via-Symbolic-Link-Handling · Note
• https://twitter.com/VulmonFeeds/status/1944314188488159541 · Twitter Post