Description
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | GlobalProtect App | 6.2.0 – < 6.2.8-h15, 6.3.0 – < 6.3.3-h16 | 6.2.8-h15 |
Advisories 1
- WID-SEC-2026-3962 Palo Alto Networks GlobalProtect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2026
References
- PAN-OS Security Advisory vendor-advisory