Cato Networks vulnerabilities
We track 4 vulnerabilities in Cato Networks products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest Cato Networks vulnerabilities
- 8.5 High severity
SDP Client: Relative Path Traversal
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.
- 8.3 High severity
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that…
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal sys
- 8.6 High severity
Cato Client: Improper Link Resolution Before File Access
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling.
- 8.1 High severity
SDP Client: Concurrent Execution using Shared Resource with Improper Synchronization
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.