CVE-2026-0315

Awaiting Analysis Awaiting Analysis - Queue

Local Privilege Escalation in Palo Alto Networks GlobalProtect macOS App

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Palo Alto Networks, Inc.

Description

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-0315

Affected Vendors & Products

Vendor	Product	Version / Range
Palo	Alto	Networks GlobalProtect App 6.2.0
Palo	Alto	Networks GlobalProtect App 6.3.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-426	The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Attack-Flow Graph

Executive Summary

This is a local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app for macOS. It allows a local user with limited access to escalate their privileges to root level, enabling them to execute arbitrary commands with administrative rights.

Detection Guidance

Detection requires checking if the vulnerable Palo Alto Networks GlobalProtect app is installed on macOS. Verify the app version and look for unauthorized privilege escalation attempts in system logs.

Impact Analysis

If you are a non-administrative user on macOS with the GlobalProtect app installed, an attacker could exploit this flaw to gain full control over your system. This could lead to unauthorized data access, malware installation, or system compromise.

Compliance Impact

This vulnerability allows a local user to escalate privileges to root on macOS, enabling execution of arbitrary commands with administrative rights. Such unauthorized privilege escalation could potentially lead to unauthorized access to sensitive data, which may violate compliance requirements under standards like GDPR or HIPAA if exploited.

Mitigation Strategies

Update the GlobalProtect app to the latest version provided by Palo Alto Networks. If an update is not available, consider temporarily disabling the app or restricting local user access until a patch is applied.

Hi! I’m here to help you understand CVE-2026-0315. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70