CVE-2026-0315

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

Score

CVSS 4.0 5.9 Medium

Status

Awaiting Analysis - psirt@paloaltonetworks.com

Published

2026-10-14

Last modified

2026-10-16

Weaknesses

CWE-426

Affected products

• Globalprotect App (Palo Alto Networks)

References

• https://security.paloaltonetworks.com/CVE-2026-0315