CVE-2025-0135 — GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App

CVE-2025-0135

GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App PUBLISHED

Description (CNA)

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / GlobalProtect App	affected 6.3.0 before 6.3.3; affected 6.2.0 before 6.2.8; affected 6.1.0; affected 6.0.0
Palo Alto Networks / GlobalProtect App	unaffected All
Palo Alto Networks / GlobalProtect UWP App	unaffected All

CWE

CWE-266

References

https://security.paloaltonetworks.com/CVE-2025-0135

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.