PT-2025-28945 · Palo Alto Networks · Globalprotect App+1

Alex Bourla + 1 · Published 2025-07-09 · Updated 2025-07-15 · CVE-2025-0141

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App versions prior to 6.2.8-c243

Description: An incorrect privilege assignment allows a locally authenticated, non-administrative user to escalate privileges to root on macOS and Linux, or NTAUTHORITY SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Recommendations: Upgrade to GlobalProtect App version 6.2.8-c243.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-0141

Affected Products

Globalprotect App

Globalprotect Uwp App

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0141 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-0141 · Vendor Advisory
• https://twitter.com/CCBalert/status/1945140984708317415 · Twitter Post
• https://twitter.com/CVEnew/status/1943335885509955738 · Twitter Post
• https://reddit.com/r/paloaltonetworks/comments/1lwzrih/globalprotect_cve20250141_fix · Reddit Post
• https://reddit.com/r/paloaltonetworks/comments/1lvnos0/628183_to_628c243 · Reddit Post