CVE-2025-3886

HIGH 8.1CVE-2025-3886 · Published 27/04/2025 · updated 17/06/2026

In short

CVE-2025-3886 is a HIGH (CVSS 8.1) vulnerability affecting cato client (catonetworks).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.5% of all vulnerabilities.
Fix: update to 5.8.0 or later.

Package	Affected versions	Patched versions
cato client catonetworks	`< 5.8.0`	`5.8.0`

Description

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.

References

support.catonetworks.com/hc/en-us/articles/26903049677597-Security-Vulnerability-CVE-2025-3886-that-Impacts-macOS-Client-Versions-Lower-than-5-8 · Vendor Advisory

More vulnerabilities in cato client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cato client

catonetworks

< 5.8.0

5.8.0

More vulnerabilities in cato client

See all →