CVE-2026-19377

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence PoP server and intercept or modify tunnel traffic...

CVE-2026-19377

The Cato Client is vulnerable to a security flaw due to improper certificate validation during the tunnel handshake. This allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server , enabling them to intercept or modify tunnel traffic. No specific exploit information...

EUVD-2026-101881

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence PoP server and intercept or modify tunnel traffic...

CVE-2026-19377 Improper certificate validation in Cato Client tunnel handshake

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence PoP server and intercept or modify tunnel traffic...

CVE-2026-12374

CVE-2026-12374 affects the macOS PrivilegedHelperTool in Cato Client prior to v5.13.1. The issue combines improper XPC caller certificate validation with a TOCTOU race, allowing a local authenticated attacker to escalate to root by using a self-signed certificate that bypasses XPC caller verifica...

CVE-2026-12374 Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

CVE-2026-12374: Improper Certificate Validation

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

Cato Networks Cato Client for Linux security vulnerabilities

Cato Networks Cato Client for Linux is a network connectivity software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Cato Client for Linux prior to version 5.5, which stems from improper handling of symbolic links and could lead to elevated privileges...

Cato Client Helper Service Privilege Escalation

The vulnerability of the Cato Client software’s remote access service is related to improper resource blocking. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

PT-2025-17688 · Cato · Cato Client For Macos

Name of the Vulnerable Software and Affected Versions: Cato Client for macOS affected versions not specified Description: A local privilege escalation issue exists due to a Time-Of-Check Time-Of-Use vulnerability in the Cato Client for macOS Helper Service. The estimated number of potentially...

Cato Client Security Vulnerability

Cato Client is a remote access application from Cato Corporation. A security vulnerability exists in Cato Client prior to version v.5.4.0, which stems from a vulnerability that allows an attacker to escalate privileges and win conditions of competition TOCTOU via the PrivilegedHelperTool componen...