CVE-2026-0251CWE-426

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Medium · published May 13, 2026

CVSS v4.0
5.9
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2026-05-13T18:20Z
EPSS history
Timeline
  • 13 MAY 18:20Z
    GlobalProtect App: Local Privilege Escalation Vulnerabilities
    cvelistv5