VYPR

PrivilegedHelperTool

by Cato Networks

CVEs (1)

  • CVE-2026-12374MedJul 1, 2026
    risk 0.00cvss epss 0.00

    Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that…