Vulnerability in Netskope Client
CVE-2025-0309
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.
Vulnerability class: Improper Certificate Validation
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (6.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 6th percentile — 6.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Netskope Client — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- blog.amberwolf.com/blog/2025/august/breaking-into-your-network-zer0-effort/ (third-party-advisory)
- www.netskope.com/company/security-compliance-and-assurance/security-advisories-… (vendor-advisory)
Frequently asked questions
- What is CVE-2025-0309?
- CVE-2025-0309 is a vulnerability in Netskope Client, classified under Improper Certificate Validation. Published 2025-08-14.
- Is CVE-2025-0309 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.