High · published August 13, 2026
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
| Product | Versions | Fixed in |
|---|---|---|
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.2.0, < 6.2.8 | 6.2.8 |
| paloaltonetworks/globalprotect | ≥ 6.2.0, < 6.2.8 | 6.2.8 |
| paloaltonetworks/globalprotect | ≥ 6.3.0, < 6.3.3 | 6.3.3 |
| paloaltonetworks/globalprotect | ≥ 6.3.0, < 6.3.3 | 6.3.3 |
| paloaltonetworks/globalprotect | ≥ 6.3.0, < 6.3.3 | 6.3.3 |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |