CVE-2026-0315

GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

State: Published
Severity: 5.9 Medium
Published: Oct 14, 2026
Updated: Oct 16, 2026
Reserved: Nov 3, 2025

Description

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

Scores

CVSS	Score	Vector	Source
4.0	5.9 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber	palo_alto

Weaknesses

CWE-426 Untrusted Search Path

Affected Products

Product	Versions
GlobalProtect AppPalo Alto Networks	6.2.0 to before 6.2.8-h15Affectedfrom 6.2.8-h15Not affected 6.3.0 to before 6.3.3-h16Affectedfrom 6.3.3-h16Not affected
GlobalProtect AppPalo Alto Networks	All to before 12.2.4Not affectedfrom 12.2.4Not affected

References

PAN-OS Security Advisoryvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.