CVE-2025-9142: high-severity vulnerability in checkpoint Hramony SASE
Local privilege escalation in Harmony SASE Windows Agent
Published
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.1%
exploitation probability
0.1%top 100% of all CVEs
observed exploitation
nono source reports it
A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
checkpoint · Hramony SASE