IT

Tracker / CVE-2026-0299

CVE-2026-0299

High 7.8

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Affected products and versions

paloaltonetworks globalprotect
paloaltonetworks globalprotect · 6.0.0 → 6.0.15
paloaltonetworks globalprotect · 6.2.0 → 6.2.8
paloaltonetworks globalprotect · 6.3.0 → 6.3.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References