PT-2026-40752 · Palo Alto Networks · Globalprotect App

Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-0251

NVD

CVSS v4.0

5.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITYSYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-0251

Affected Products

Globalprotect App

References · 2

• https://security.paloaltonetworks.com/CVE-2026-0251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0251 · Security Note