PT-2025-33117 · Netskope · Netskope Client

Richard Warren

·

Published

2025-08-14

·

Updated

2026-03-24

·

CVE-2025-0309

CVSS v4.0

6.0

Medium

VectorAV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Netskope Client for Windows (affected versions not specified)
Description An insufficient validation exists on the server connection endpoint within Netskope Client. This flaw allows local users to elevate their privileges on the system. The inadequate validation permits Netskope Client to connect to any server utilizing publicly signed CA TLS certificates and transmit specifically crafted responses, ultimately leading to privilege escalation. The issue was discussed during a DEF CON #ZeroTrustTotalBust talk and a proof-of-concept (PoC) exploit has been released. The vulnerability allows a rogue server to manipulate responses and gain elevated access.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-0309

Affected Products

Netskope Client