A local privilege escalation vulnerability, CVE-2026-10739, has been discovered in the Cato VPN Client. The flaw exists within the split-tunnel upload flow, allowing an attacker to escalate privileges from a named pipe to SYSTEM-level access. This is achieved through a combination of SYSTEM delete operations and Windows Installer rollback mechanisms. Users of the Cato VPN Client should apply patches immediately to prevent local attackers from gaining elevated privileges on their systems.