Privilege Escalation Vulnerability in Palo Alto Networks GlobalProtect App for Windows

CVE-2025-0120

Summary

A privilege management flaw in Palo Alto Networks GlobalProtect app on Windows systems allows authenticated non-administrative users to escalate their privileges to NT AUTHORITY\SYSTEM. Although exploitation of this vulnerability requires the attacker to successfully carry out a race condition, it poses significant risks if leveraged. Users should ensure their systems are updated and patched as per vendor advisories to mitigate this threat.

References