Privilege Escalation Flaw in Palo Alto Networks Digital Experience Manager

CVE-2025-0139

What is CVE-2025-0139?

A vulnerability has been identified in Palo Alto Networks Autonomous Digital Experience Manager that enables a locally authenticated user with low privileges on macOS endpoints to escalate their privileges to root. This incorrect privilege assignment flaw could be exploited by malicious actors to gain unauthorized access to sensitive system resources and perform actions with elevated permissions, significantly compromising system security.

References