CVE-2026-0315CWE-426

CVE-2026-0315

published October 15, 2026

CVSS
5.9
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
5.9 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00105 · 1.0th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2026-10-15T01:17Z
References (1)
https://security.paloaltonetworks.com/CVE-2026-0315 · [email protected]
EPSS history
Timeline
  • 16 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 14 OCT 20:24Z
    GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
    cvelistv5
  • 14 OCT 20:24Z
    GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
    cvelistv5