Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-0315

GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.2.0 to < 6.2.8-h15affected
  • 6.3.0 to < 6.3.3-h16affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • All to < 12.2.4unaffected

References