Netskope Security Advisory – Netskope Client Security Advisory
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys, and lack of kernel-enforced self-protection in Netskope Client.
Security Advisory ID: NSKPSA-2025-008
Versione: 1.0
Stato: Pubblicato
First Published: June 16, 2026
Description
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys, and lack of kernel-enforced self-protection in Netskope Client.
Affected Product(s) and Version(s)
Product Name: Netskope Client
Affected Platform: Windows
Affected Version: All version below R138
CVE-ID(s)
CVE-2025-15642
Remediation
Netskope has released a security patch for the issue. Please see below
Istruzioni per il download Netskope – Download Netskope Client e Script – Supporto Netskope
Workaround
There are no workarounds available at this time.
General Security Best Practices
Netskope recommends using security hardening options available in the product and configuring them to harden the security of a Netskope tenant- https://docs.netskope.com/en/secure-tenant-configuration-and-hardening/
Sfruttamento e Divulgazioni Pubbliche
Netskope non è a conoscenza di alcun sfruttamento attivo della questione di sicurezza.
Special Notes and Acknowledgement
Netskope credits Juan Pablo Barriga for reporting this flaw.
Storia delle revisioni
| Versione | Data | Sezione | Note |
|---|---|---|---|
| 1.0 | 16 June 2026 | Initial Version |
Disclaimer legale:
Nella massima misura consentita dalla legge applicabile, le informazioni fornite in questo avviso sono fornite "così come sono" senza alcuna garanzia. L'uso delle informazioni contenute in questo avviso o nei materiali qui collegati è a tuo rischio. Questo avviso e tutti gli aspetti della Policy di Risposta agli Incidenti di Sicurezza dei Prodotti di Netskopesono soggetti a modifiche senza preavviso. La risposta non è garantita per nessun problema specifico o categoria di questioni. I tuoi diritti riguardanti garanzie, supporto e manutenzione, incluse vulnerabilità in qualsiasi software o servizio Netskope, sono regolati esclusivamente dal valido accordo quadro tra Netskope e te. Le dichiarazioni contenute in questo avviso non modificano, ampliano o non modificano alcun tuo diritto ai sensi del contratto quadro applicabile, né creano garanzie o impegni aggiuntivi.
Informazioni su Netskope
Netskope (NASDAQ: NTSK), a leader in modern security and networking for the cloud and AI era, addresses the needs of both security and networking teams by providing optimized access and real-time, context-based security for the AI ecosystem inclusive of agents, applications, tools, LLMs, people, devices, and data. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and its powerful NewEdge network to reduce risk and gain full visibility and control over cloud, AI, SaaS, web, and private applications – providing security and accelerating performance without trade-offs. Learn more at www.netskope.com, Netskope.ai, on LinkedIn, and Instagram.
