PT-2025-25235 · Palo Alto Networks · Globalprotect

Rutger Flohil · Published 2025-06-11 · Updated 2025-07-08 · CVE-2025-4232

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect versions prior to 6.2.8-h2 on macOS

Description An improper neutralization of wildcards vulnerability in the log collection feature of the Palo Alto Networks GlobalProtect app on macOS allows a non-administrative user to escalate their privileges to root. Public proof-of-concept code exists, and it is recommended to update now to protect the system.

Recommendations For versions prior to 6.2.8-h2 on macOS, update to version 6.2.8-h2 or later to resolve the issue. As a temporary workaround, consider restricting access to the log collection feature until a patch is applied. Avoid using the vulnerable log collection feature in the GlobalProtect app until the issue is resolved.

Fix

LPE

Improper Neutralization of Wildcards

Weakness Enumeration

CWE-155

Related Identifiers

BDU:2025-08772

CVE-2025-4232

Affected Products

Globalprotect

References · 15

• https://bdu.fstec.ru/vul/2025-08772 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-4232 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-4232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4232 · Security Note
• https://t.me/latest_high_impact_cve/2636 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1932982141765497094 · Twitter Post
• https://twitter.com/jbhall56/status/1933134995477987417 · Twitter Post
• https://twitter.com/CVEnew/status/1933309379899490728 · Twitter Post
• https://reddit.com/r/paloaltonetworks/comments/1l8xjap/new_gp_vulnerability · Reddit Post
• https://twitter.com/dCypherIO/status/1934581721376145709 · Twitter Post
• https://twitter.com/CveFindCom/status/1933308313426383214 · Twitter Post
• https://t.me/latest_high_impact_cve/2642 · Telegram Post
• https://t.me/cvetracker/26139 · Telegram Post
• https://reddit.com/r/Action1/comments/1luvbmr/%F0%9D%90%93%F0%9D%90%A8%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2%F0%9D%90%AC_%F0%9D%90%8F%F0%9D%90%9A%F0%9D%90%AD%F0%9D%90%9C%F0%9D%90%A1_%F0%9D%90%93%F0%9D%90%AE%F0%9D%90%9E%F0%9D%90%AC%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2_%F0%9D%90%A8%F0%9D%90%AF%F0%9D%90%9E%F0%9D%90%AB%F0%9D%90%AF%F0%9D%90%A2%F0%9D%90%9E%F0%9D%90%B0 · Reddit Post
• https://t.me/true_secator/7130 · Telegram Post