CVE-2026-0315

UNKNOWN 0.0

GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

CWE	CWE-426
Vendor	palo alto networks
Product	globalprotect app
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks globalprotect app

Be the first to know when new unknown vulnerabilities affecting palo alto networks globalprotect app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / GlobalProtect App

6.2.0 < 6.2.8-h15 6.3.0 < 6.3.3-h16

Palo Alto Networks / GlobalProtect App

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0315

Credits

Ronen Seleri and Shahaf Pruss of Blyde Labs Christopher Ellis of Workday James Otten (internal reporter)