The vulnerability in the Cato Windows SDP Client allows a low‑privileged local user to read arbitrary files on the host. The flaw stems from improper file path validation and the lack of TLS certificate enforcement before version 6.12.6. By triggering the Windows service, an attacker can cause the service, which runs under the highly privileged Local System account, to expose sensitive files, thereby compromising confidentiality. The weakness is identified as CWE‑295 (Improper Certificate Validation) and CWE‑73 (Insecure File Handling).

Versions of the Cato SDP Client earlier than 6.12.6 are affected. The vendor is Cato Networks, and the product is the Windows SDP Client. No specific sub‑version list is supplied beyond the mention that all releases prior to 6.12.6 are vulnerable.

The CVSS score of 6.8 indicates moderate to high risk, and the EPSS score is not available, so exploitation likelihood is uncertain though the vulnerability is exploitable by a local user. The issue is not listed in the CISA KEV catalog. The attack requires local access and leverages a service that runs with system privileges, making the impact that any local file can be disclosed. There is no indication of an external remote exploitation vector, so the vulnerability is confined to local attackers or those who compromise the local system through other means.