CVE-2022-4149

CVE-2022-4149 is a local privilege escalation vulnerability affecting the Netskope client service on Windows, specifically versions prior to R96. It arises from a race condition during log file management, where an unprivileged local user can manipulate file permissions within the C:\Users\Public\netSkope directory. This vulnerability carries a CVSS score of 7.0 (HIGH), indicating that an attacker with low privileges can achieve high impact on confidentiality, integrity, and availability, though with high attack complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.