Home

Description

Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,. * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138

PUBLISHED Reserved 2026-04-22 | Published 2026-06-17 | Updated 2026-06-17 | Assigner Netskope




MEDIUM: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-276 Incorrect default permissions

Product status

Default status
affected

Any version before 138
affected

Credits

Netskope credits Juan Pablo Barriga for reporting this flaw. finder

References

www.netskope.com/...tskope-security-advisory-nskpsa-2025-008

cve.org (CVE-2025-15642)

nvd.nist.gov (CVE-2025-15642)

Download JSON