CVE-2025-0117 — GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

CVE-2025-0117

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability PUBLISHED

Description (CNA)

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / GlobalProtect App	affected 6.3.0 before 6.3.3; affected 6.2.0 before 6.2.6; affected 6.1.0 before 10.2.14; affected 6.0.0 before 10.1.14-h11
Palo Alto Networks / GlobalProtect App	unaffected All before 6.3.3
Palo Alto Networks / GlobalProtect UWP App	unaffected All

CWE

CWE-807

References

https://security.paloaltonetworks.com/CVE-2025-0117

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.