Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0299 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Oct 2026, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2026-08-13 03:16
Updated : 2026-10-23 19:10
NVD link : CVE-2026-0299
Mitre link : CVE-2026-0299
CVE.ORG link : CVE-2026-0299
JSON object : View
Products Affected
paloaltonetworks
- globalprotect
CWE
CWE-426
Untrusted Search Path
