CVE-2026-0295

UNKNOWN 0.0

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

CWE	CWE-362
Vendor	palo alto networks
Product	globalprotect app
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks globalprotect app

Be the first to know when new unknown vulnerabilities affecting palo alto networks globalprotect app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / GlobalProtect App

6.3.0 < 6.3.3-h14 (6.3.3-1121) 6.2.0 < 6.2.8-h13 (6.2.8-1045) 6.0.0 < 6.0.15

Palo Alto Networks / GlobalProtect App

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0295

Credits

Alex Bourla and Graham Brereton