Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-4232

GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.3 to < 6.3.3affected
  • 6.2.0 to < 6.2.8-h2affected
  • 6.1.0affected
  • 6.0.0affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • Allunaffected

References