Home

Description

Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all anti-tampering protections for the NSClient.Affected Product(s) and Version(s) * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138

PUBLISHED Reserved 2026-04-22 | Published 2026-06-17 | Updated 2026-06-17 | Assigner Netskope




MEDIUM: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-782 Exposed IOCTL with insufficient access control

Product status

Default status
affected

Any version before 138
affected

Credits

Netskope credits Juan Pablo Barriga for reporting this flaw. finder

References

www.netskope.com/...tskope-security-advisory-nskpsa-2025-007

cve.org (CVE-2025-15641)

nvd.nist.gov (CVE-2025-15641)

Download JSON