CVE-2025-0141CWE-426

GlobalProtect App: Privilege Escalation (PE) Vulnerability

High · published July 9, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00178 · 7.0th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-07-09T22:58Z
EPSS history
Timeline
  • 09 JUL 22:58Z
    GlobalProtect App: Privilege Escalation (PE) Vulnerability
    cvelistv5