CVE-2025-9142 - CVE House
Back to Database
Status published High CVE-2025-9142

Local privilege escalation in Harmony SASE Windows Agent

Vulnerability Description

A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9142

Credits & Attribution

No credits recorded in the NVD database.

References

More from checkpoint

View All →
CVE-2025-8305
Information Disclosure in Identity Agent Debug Files
Medium 6.5
CVE-2025-8304
Information Disclosure in Identity Agent Registry Keys
Medium 6.5
CVE-2025-3831
Exposed SFTP server
High 8.1
CVE-2025-2028
Lack of TLS validation
Medium 6.5
CVE-2024-52888
Stored-XSS
Medium 5.4

Affected Vendor

Affected Software

Hramony SASE
Vulnerable Versions:
Check Point Harmony SASE Windows Agent versions prior to 12.2

Timeline

Official Publish: January 14th, 2026
Last Modified: January 14th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-22

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact