Skip to content
OpenAdvisories
High · 7.0 CVE-2024-7402 EUVD-2024-54879GHSA-pcpp-7694-v79q

Netskope Client Configuration Tampering with Local MITM

Published Aug 14, 2025 · Updated Aug 15, 2025 · Assigned by Netskope

Description

Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine.

Affected products

VendorProductAffectedFixed
Netskope Netskope Client < 123.0.16, 126.0.9, 129.0.0 123.0.16, 126.0.9, 129.0.0

References