CVE-2026-0299

UNKNOWN 0.0

GlobalProtect App: Local Privilege Escalation Vulnerabilities

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

CWE	CWE-426
Vendor	palo alto networks
Product	globalprotect app
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks globalprotect app

Be the first to know when new unknown vulnerabilities affecting palo alto networks globalprotect app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / GlobalProtect App

6.3.0 < 6.3.3-h15 6.2.0 6.0.0 < 6.0.15

Palo Alto Networks / GlobalProtect App

6.3.0 < 6.3.3-h14 6.2.0 < 6.2.8-h13 6.0.0 < 6.0.15

Palo Alto Networks / GlobalProtect App

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0299

Credits

our internal security research teams