Check Point Harmony SASE Windows Client Vulnerability Enables Privilege Escalation

A local privilege-escalation vulnerability (CVE-2025-9142) in Check Point Harmony SASE Windows client (Perimeter81.Service.exe) allows attackers to bypass JWT validation and use directory traversal plus symbolic-link injection to write malicious DLLs to protected system locations and achieve SYSTEM-level execution; Check Point published a fix in version 12.2 and affected customers are advised to upgrade immediately and apply local hardening (restrict admin rights, application whitelisting).