CVE-2025-4232 — GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

CVE-2025-4232

GlobalProtect: Authenticated Code Injection Through Wildcard on macOS PUBLISHED

Description (CNA)

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / GlobalProtect App	affected 6.3 before 6.3.3; affected 6.2.0 before 6.2.8-h2; affected 6.1.0; affected 6.0.0
Palo Alto Networks / GlobalProtect App	unaffected All

CWE

CWE-155

References

https://security.paloaltonetworks.com/CVE-2025-4232

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.