CVE-2026-0251 – GlobalProtect App: Local Privilege Escalation Vulnerabilities

CVE ID :CVE-2026-0251

Published : May 13, 2026, 6:20 p.m. | 38 minutes ago

Description :Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITYSYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…