8.4
High
CVE-2025-0141 An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally…
Description
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GlobalProtect App 6.2 | 6.2.0 → < 6.2.8 | 6.2.8 |
| GlobalProtect App | 6.1.0 | No fix stated |
| GlobalProtect App | 6.0.0 | No fix stated |
| GlobalProtect UWP App | Versions not published |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of GlobalProtect App
The 41 CVEs of GlobalProtect App →
CVE-2026-0314
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low…
4.3
Medium
CVE-2026-0315
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate…
5.9
Medium
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user…
5.9
Medium
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to…
5.9
Medium