CVE-2025-0135

No fix known EPSS <1%CVSS 5.2

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Published 2025-05-14 · CVE record · OSV

Products: Palo Alto Networks GlobalProtect App, Palo Alto Networks GlobalProtect UWP App