CVE-2026-0315 — GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

CVE-2026-0315

GlobalProtect App: Local Privilege Escalation Vulnerability on macOS PUBLISHED

Description (CNA)

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / GlobalProtect App	affected 6.2.0 before 6.2.8-h15; affected 6.3.0 before 6.3.3-h16
Palo Alto Networks / GlobalProtect App	unaffected All before 12.2.4

CWE

CWE-426

References

https://security.paloaltonetworks.com/CVE-2026-0315

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.