Vulnerability · Published Jun 17, 2026 · Assigned by Netskope
CVE-2025-15642Netskope Client Service Insufficient Access Controls
Medium 6.8
In plain English
A medium-severity incorrect default permissions in Netskope Client from Netskope. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Official description
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,. * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Netskope | Netskope Client | 0 – before 138 |
Weakness: CWE-276 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N