CVE-2025-4232

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@paloaltonetworks.com

Published

2025-06-13

Last modified

2026-02-26

Weaknesses

CWE-155

Affected products

• Globalprotect App (Palo Alto Networks)
• Globalprotect (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2025-4232