CVE-2026-0315
Medium
Description
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Palo Alto Networks Globalprotect App
PublishedOct 14, 2026
First seenOct 14, 2026
Weakness typeCWE-426CWE-426
How to fix
Update
- palo_alto_networks globalprotect_app6.2.8-h15, 6.3.3-h16 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palo_alto_networks globalprotect_app | 6.2.0 ≤ v < 6.2.8-h15, 6.3.0 ≤ v < 6.3.3-h16 | 6.2.8-h15, 6.3.3-h16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.