CVE-2026-0251

No fix known EPSS <1%CVSS 5.9

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Published 2026-05-13 · CVE record · OSV

Products: Palo Alto Networks GlobalProtect App, Palo Alto Networks Global Protect App