CVE-2026-12374EPSS p0.0%

CVE-2026-12374CVE-2026-12374

Description

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.

Scoring

EPSS0.06% probability of exploitation · percentile 0.0% · 2026-08-05T12:04:55Z
Last modified2026-07-02
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.