Medium · 5.2 CVE-2026-0298 EUVD-2026-57712GHSA-gf7f-qj8g-pr38

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: GlobalProtect App Category: Network devices

Description

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.

The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto Networks	GlobalProtect App	6.3.0 – < 6.3.3-h14, 6.2.0 – < 6.2.8-h13, 6.0.0 – < 6.0.15	6.3.3-h14

Advisories 1

WID-SEC-2026-2804 Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 12, 2026

References

https://security.paloaltonetworks.com/CVE-2026-0298 vendor-advisory