Vulnerability in Palo Alto Networks Globalprotect App
CVE-2026-0295
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS i…
Vulnerability class: Race Condition
Affected products
- Palo Alto Networks Globalprotect App — versions 6.3.0, 6.2.0, 6.0.0
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)