Vulnerability in Palo Alto Networks Globalprotect App
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. This GlobalProtect app on iOS, Android and ChromeOS is not impacted.
Affected products
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)