CVE-2026-12374 Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

CVE-2026-12374

CVE-2026-12374 affects the macOS PrivilegedHelperTool in Cato Client prior to v5.13.1. The issue combines improper XPC caller certificate validation with a TOCTOU race, allowing a local authenticated attacker to escalate to root by using a self-signed certificate that bypasses XPC caller verifica...

CVE-2026-12374: Improper Certificate Validation

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

Cato Networks Cato Client for Linux 安全漏洞

Cato Networks Cato Client for Linux is a network connectivity software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Cato Client for Linux prior to version 5.5, which stems from improper handling of symbolic links and could lead to elevated privileges...

The vulnerability of the Helper service in the Cato Client software for remote access allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the Cato Client software’s remote access service is related to improper resource blocking. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

PT-2025-17688 · Cato · Cato Client For Macos

Name of the Vulnerable Software and Affected Versions: Cato Client for macOS affected versions not specified Description: A local privilege escalation issue exists due to a Time-Of-Check Time-Of-Use vulnerability in the Cato Client for macOS Helper Service. The estimated number of potentially...

Cato Client Security Vulnerability

Cato Client is a remote access application from Cato Corporation. A security vulnerability exists in Cato Client prior to version v.5.4.0, which stems from a vulnerability that allows an attacker to escalate privileges and win conditions of competition TOCTOU via the PrivilegedHelperTool componen...