CVE-2025-15641 — Netskope Client Exposed IOCTL with Insufficient Access Controls

CVE-2025-15641

Netskope Client Exposed IOCTL with Insufficient Access Controls PUBLISHED

Description (CNA)

Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all anti-tampering protections for the NSClient.Affected Product(s) and Version(s) * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138

Affected (CNA)

Vendor / product	Versions
Netskope / Netskope Client	affected 0 before 138

CWE

CWE-782

References

https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2025-007

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.