← CVE Intelligence

CVE-2026-0299

GlobalProtect App: Local Privilege Escalation Vulnerabilities PUBLISHED

Description (CNA)

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / GlobalProtect Appaffected 6.3.0 before 6.3.3-h15; affected 6.2.0; affected 6.0.0 before 6.0.15
Palo Alto Networks / GlobalProtect Appaffected 6.3.0 before 6.3.3-h14; affected 6.2.0 before 6.2.8-h13; affected 6.0.0 before 6.0.15
Palo Alto Networks / GlobalProtect Appunaffected All

CWE

CWE-426

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.