Medium · 5.7 CVE-2025-3886 EUVD-2025-12448GHSA-hhrg-ww69-4cxj

CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

Published Apr 27, 2025 · Updated Apr 28, 2025 · Assigned by Cato

Vendor: Cato Networks Product: SDP Client

Description

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.

Affected products

Vendor	Product	Affected	Fixed
Cato Networks	SDP Client	< 5.8.0	5.8.0

References

https://support.catonetworks.com/hc/en-us/articles/26903049677597-Security-Vulnerability-CVE-2025-3886-that-Impacts-macOS-Client-Versions-Lower-than-5-8