Local Privilege Escalation in Palo Alto Networks GlobalProtect App on macOS
CVE-2026-0315

5.9MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Globalprotect App
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-0315?

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect application allows an unprivileged local user on macOS to gain root access. This exploitation could enable the execution of arbitrary commands with elevated privileges, potentially compromising the system's integrity. Notably, the vulnerability does not affect the GlobalProtect app on Linux, Windows, iOS, Android, or Chrome OS platforms.

Affected Version(s)

GlobalProtect App macOS 6.2.0 < 6.2.8-h15

GlobalProtect App macOS 6.3.0 < 6.3.3-h16

GlobalProtect App Linux All

References

https://security.paloaltonetworks.com/CVE-2026-0315
vendor-advisory

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ronen Seleri and Shahaf Pruss of Blyde Labs
Christopher Ellis of Workday
James Otten (internal reporter)
.