Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-01-28 | 3 | Disclosure1General1Patch1 |
| 2026-01-29 | 1 | Patch1 |
| 2026-02-05 | 1 | Patch1 |
Advisory - Check Point Harmony Local Privilege Escalation (CVE-2025-9142) https://www.reddit.com/r/blueteamsec/comments/1qoqhyf/advisory_check_point_harmony_local_privilege/
Post summary
The Reddit post is titled as an advisory for CVE-2025-9142 but provides no technical details, PoC, exploit code, patch information, or evidence of active exploitation.
Check Point Harmony SASE の脆弱性 CVE-2025-9142 が FIX：SYSTEM 権限昇格の恐れ https://iototsecnews.jp/2026/01/28/check-point-harmony-sase-windows-client-vulnerability-enables-privilege-escalation/ Check Point が提供するクラウドネイティブな Secure Access Service Edge (SASE) ソリューション、Harmony SASE の Windows 用クライアントにおいて、SYSTEM 権限への昇格が可能な深刻な脆弱性 CVE-2025-9142 が報告されました。 この脆弱性は、もともと Perimeter 81 として知られていたコンポーネントに起因するもので、ローカルの低権限ユーザーであっても、特定の細工を施すことで、最終的に Windows システムにおける最高権限 (SYSTEM) を奪取できるというものです。 この脆弱性は、バージョン 12.2 未満の、すべての Harmony SASE Windows クライアントに影響を及ぼします。修正パッチは、2025年11月18日の時点で提供されており、2026年1月14日には正式な CVE 情報が公開されました。ご利用のチームは、ご注意ください。 #CheckPoint #CVE20259142 #HarmonySASE #Vulnerability
Post summary
CVE-2025-9142 enables local users to gain SYSTEM privileges on Check Point Harmony SASE Windows clients below version 12.2; a patch was released on November 18, 2025.
Critical flaw in Check Point's Harmony SASE Windows client (CVE-2025-9142) allows privilege escalation. Upgrade to version 12.2+ immediately! Link: https://thedailytechfeed.com/check-points-harmony-sase-windows-client-vulnerability-allows-privilege-escalation-urgent-update-advised/ #Security #CheckPoint #Vulnerability #Update #Windows #Client #Flaw #Escalation #Upgrade #Patch #Software #Protection #Threat #Risk #Exploit #Cyber #Technology #Network #IT #Defense
Post summary
A security advisory warns of a privilege escalation vulnerability (CVE-2025-9142) in Check Point Harmony SASE Windows client and recommends an immediate upgrade to version 12.2+ to remediate the issue.
Check Point Harmony SASE Windows client hit by critical privilege escalation bug CVE-2025-9142, in Perimeter81 service before v12.2, lets local users alter files and gain SYSTEM-level control. #Vulnerability https://threatcluster.io/cluster/check-point-harmony-sase-windows-client-vulnerability-allows-c3cd4729
Post summary
The post announces a critical privilege escalation vulnerability (CVE-2025-9142) affecting Check Point Harmony SASE Windows client, allowing local users to modify files and gain SYSTEM-level control.
『The domain was returned to Check Point to mitigate the risk during the time between the vulnerability being reported and the client being patched.』 Advisory - Check Point Harmony Local Privilege Escalation (CVE-2025-9142) https://blog.amberwolf.com/blog/2026/january/advisory---check-point-harmony-local-privilege-escalation-cve-2025-9142/
Post summary
A Check Point Harmony local privilege escalation vulnerability (CVE‑2025‑9142) was reported; the domain was returned to the vendor to reduce risk until a client patch was applied.