CVE-2026-0315
CVE-2026-0315 · GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
CVSS 5.9 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
globalprotect app
- Versions
- ≥ 6.2.0, < 6.2.8-h15: Affected; ≥ 6.2.8-h15: Not affected (custom)
- ≥ 6.3.0, < 6.3.3-h16: Affected; ≥ 6.3.3-h16: Not affected (custom)
Update to 6.2.8-h15; Update to 6.3.3-h16
globalprotect app
- Versions
- ≥ All, < 12.2.4: Not affected; ≥ 12.2.4: Not affected (custom)
No fix published