Description (CNA)
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user also successfully exploits a race condition, which makes this vulnerability difficult to exploit.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OPSWAT / MetaDefender Endpoint Security SDK | affected 4.3.0 before 4.3.4451 |
CWE
CWE-266
References
- https://security.paloaltonetworks.com/CVE-2025-0131
- https://www.opswat.com/docs/mdsdk/release-notes/cve-2025-0131
ADP enrichment
No English description supplied.
No references supplied.