Vulnpedia
← All CVEs

CVE-2026-0299

MEDIUM 5.9 ALL-YEARS

Published 2026-08-13 · Last modified 2026-08-13 · palo_alto · NVD: Analyzed

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 6th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

5.9CVSS 4.0 · MEDIUM · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Palo Alto Networks Paloaltonetworks

Products Globalprotect App Globalprotect

Weakness (CWE)

  • CWE-426: Untrusted Search Path

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

References and research data (JSON)

Known Affected Software Configurations

VendorProductVersion range
PaloaltonetworksGlobalprotect≥ 6.0.0 and < 6.0.15
PaloaltonetworksGlobalprotect≥ 6.0.0 and < 6.0.15
PaloaltonetworksGlobalprotect≥ 6.0.0 and < 6.0.15
PaloaltonetworksGlobalprotect≥ 6.2.0 and < 6.2.8
PaloaltonetworksGlobalprotect≥ 6.2.0 and < 6.2.8
PaloaltonetworksGlobalprotect≥ 6.3.0 and < 6.3.3
PaloaltonetworksGlobalprotect≥ 6.3.0 and < 6.3.3
PaloaltonetworksGlobalprotect≥ 6.3.0 and < 6.3.3
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.2.8
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3
PaloaltonetworksGlobalprotect6.3.3

All CVSS metrics

  • MEDIUM 5.9 v4.0 · CNA Primary
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
  • MEDIUM 5.9 v4.0 · NVD Secondary
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
  • HIGH 7.8 v3.1 · NVD Primary
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Advisories

Sources: NVD · CVE.org · All sources and attribution · EPSS