CVE-2025-15642 — Netskope Client Service Insufficient Access Controls

CVE-2025-15642

Netskope Client Service Insufficient Access Controls PUBLISHED

Description (CNA)

Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,. * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138

Affected (CNA)

Vendor / product	Versions
Netskope / Netskope Client	affected 0 before 138

CWE

CWE-276

References

https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2025-008

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.