CVE-2025-9142: Local privilege escalation in Harmony SASE Windows Agent
Published Jan 14, 2026
·Updated
A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
Affected Software
1 affected component
Check Point Harmony SASE Windows Agent
Event History
Jan 14, 2026
CVE Published
via MITRE·02:30 PM
Data Sourced
via MITRE·02:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-9142?
CVE-2025-9142 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
2
How do I fix CVE-2025-9142?
To fix CVE-2025-9142, update to the latest version of the Check Point Harmony SASE Windows Agent as provided by the vendor.
3
What platforms are affected by CVE-2025-9142?
CVE-2025-9142 specifically affects the Check Point Harmony SASE Windows Agent.
4
What type of vulnerability is CVE-2025-9142?
CVE-2025-9142 is a local privilege escalation vulnerability, allowing unauthorized file modifications.
5
Who is affected by CVE-2025-9142?
Any user operating the affected versions of the Check Point Harmony SASE Windows Agent may be impacted by CVE-2025-9142.