CVE-2026-0299: Local privilege escalation vulnerabilities in the Palo Alto
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
- EPSS 0.2% (9.2% percentile)
- CVSS 5.9 medium