CVE-2026-0299

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-08-13

Last modified

2026-10-23

Weaknesses

CWE-426

Affected products

• Globalprotect App (Palo Alto Networks)
• Globalprotect (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0299