Skip to content
OpenAdvisories
Medium · 4.1 CVE-2026-0295 EUVD-2026-57709GHSA-c668-xghx-7pj9

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: GlobalProtect App Category: Network devices

Description

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.

The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Affected products

VendorProductAffectedFixed
Palo Alto Networks GlobalProtect App 6.3.0 – < 6.3.3-h14 (6.3.3-1121), 6.2.0 – < 6.2.8-h13 (6.2.8-1045), 6.0.0 – < 6.0.15 6.3.3-h14 (6.3.3-1121)

Advisories 1

References