CVE-2025-15642: Netskope Client Service Insufficient Access Controls
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,. Product Name: Netskope Client Affected Platform: Windows Affected Version: All version below R138
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netskope Clientto a version that resolves this vulnerability.Fixed in R138 and above - Upgrade
Upgrade
Netskope Clientto a version that resolves this vulnerability.Fixed in R135 (135.1.19.2670 and above ) - Upgrade
Upgrade
Netskope Clientto a version that resolves this vulnerability.Fixed in R132 (132.0.27.2671 and above )
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15642?
CVE-2025-15642 has a risk level of 34.
How do I fix CVE-2025-15642?
To fix CVE-2025-15642, ensure proper configuration of DACLs on the Netskope Client service object and related registry keys.
Who is affected by CVE-2025-15642?
CVE-2025-15642 affects users of the Netskope Client for Windows with potential insider threats.
What type of vulnerability is CVE-2025-15642?
CVE-2025-15642 is an Insufficient Access Control vulnerability.
When was CVE-2025-15642 published?
CVE-2025-15642 was published on June 17, 2026.