Harmony SASE Windows Client Vulnerability Enables Privilege Escalation
https://cybersecuritynews.com/check-point-harmony-windows-client-vulnerability/amp/
A critical privilege-escalation vulnerability has been discovered in Check Point’s Harmony SASE (Secure Access Service Edge) Windows client software, affecting versions prior to 12.2.
Tracked as CVE-2025-9142, the flaw allows local attackers to write or delete files outside the intended certificate working directory, potentially leading to system-level compromise.
https://stacker.news/items/1422923
ch0k1 / ch0k1 🇧🇬☦️
npub1k3…q9t9m
2026-01-30 18:18:31 UTC
Author Public Key
npub1k3qrkfq45qsvyp53hvvv2xk6tt9kfdca9asfvm9nc796dq65948q9q9t9mSeen on
wss://nos.lolPublished at
2026-01-30 18:18:31 UTCEvent JSON
{
"id": "0430c925aae2a42af35e078329429851dc35bd1c0d97a4ac875edc4fd5c55960",
"pubkey": "b4403b2415a020c20691bb18c51ada5acb64b71d2f60966cb3c78ba683542d4e",
"created_at": 1769797111,
"kind": 1,
"tags": [
[
"client",
"stacker.news"
]
],
"content": "Harmony SASE Windows Client Vulnerability Enables Privilege Escalation\nhttps://cybersecuritynews.com/check-point-harmony-windows-client-vulnerability/amp/\n\nA critical privilege-escalation vulnerability has been discovered in Check Point’s Harmony SASE (Secure Access Service Edge) Windows client software, affecting versions prior to 12.2.\n\nTracked as CVE-2025-9142, the flaw allows local attackers to write or delete files outside the intended certificate working directory, potentially leading to system-level compromise.\n\nhttps://stacker.news/items/1422923",
"sig": "204d4564e91c38e14fd8fd0e0f7ce64aa1169b5717a860671ce25ebc66d35bb8a93b0970911c76dd1ea450eb9604e8522a3e40c8e1e814c1be3b50e4acfddbea"
}