Riskcovery

CVE-2025-0141

GlobalProtect App: Privilege Escalation (PE) Vulnerability

State
Published
Severity
8.4 High
Published
Jul 9, 2025
Updated
Feb 26, 2026
Reserved
Dec 20, 2024

Read the record on cve.org

Description

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Scores

CVSSScoreVectorSource
4.08.4 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amberpalo_alto

Weaknesses

Affected Products

ProductVersions
GlobalProtect AppPalo Alto Networks
  • 6.3.0 to before 6.3.3-h1 (6.3.3-c650)Affectedfrom 6.3.3-h1 (6.3.3-c650)Not affected
  • 6.2.0 to before 6.2.8-h2 (6.2.8-c243)Affectedfrom 6.2.8-h2 (6.2.8-c243)Not affected
  • 6.1.0Affected
  • 6.0.0Affected
GlobalProtect AppPalo Alto Networks
  • AllNot affected
GlobalProtect UWP AppPalo Alto Networks
  • AllNot affected
GlobalProtect AppPalo Alto Networks
  • 6.2.0 to before 6.2.8Affectedfrom 6.2.8Not affected
  • 6.1.0Affected
  • 6.0.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.