CVE-2026-0324
GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM.
| CWE | CWE-266 |
| Vendor | opswat |
| Product | metadefender endpoint security sdk |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for opswat metadefender endpoint security sdk
Be the first to know when new unknown vulnerabilities affecting opswat metadefender endpoint security sdk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OPSWAT / MetaDefender Endpoint Security SDK
4.3.0 < 4.3.4822
References
Credits
Sandro Poppi