Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2026-0267

GlobalProtect App: Information Exposure Vulnerability on macOS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.3.0 to < 6.3.3-h1affected
  • 6.2.0 to < 6.2.8-h2affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • Allunaffected

Palo Alto Networks GlobalProtect UWP App

Default version status: unaffected

  • Allunaffected

References