Security Vulnerability (CVE-2025-3886) that Impacts macOS Client Versions Lower than 5.8

Cato recently identified a security vulnerability (CVE-2025-3886) that impacts Cato macOS Clients with versions lower than 5.8. This CVE can let attackers who have access to the macOS Client on the device escalate their privileges. The Cato macOS Client versions 5.8 (and higher) include a security patch that fixes this vulnerability.

We strongly recommend that you ensure all macOS Clients are upgraded to at least macOS Client version v5.8 to protect against the vulnerability. You can download the latest macOS Client version from the Cato Client download portal.

What Changes Do I Need to Make?

Use the Access Overview Dashboard to identify users who have macOS Client with versions lower than v5.8, and make sure that they upgrade to at least macOS Client version v5.8 to receive the most recent security patches and enhancements.

We recommend that you use the Cato upgrade service to automatically upgrade Clients to the newest version.

What is the Impact to the Account?

If you don’t upgrade to macOS Client v5.8 or higher, devices with older macOS Client versions are vulnerable to malicious attacks that use CVE-2025-3886.

Who Do I Talk to If I Have Questions?

Please contact your account representative or Support.