Vulnerability · Published Jan 14, 2026 · Assigned by checkpoint
CVE-2025-9142Local privilege escalation in Harmony SASE Windows Agent
High 7.5
In plain English
A high-severity path traversal in Hramony SASE from checkpoint. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)<0.1%top 99.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Hramony SASE | Check Point Harmony SASE Windows Agent versions prior to 12.2 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H