CVE-2019-17435: Palo Alto Networks Globalprotect

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.

Affected products

• Palo Alto Networks Globalprotect: up to and including 5.0.3; up to and including 4.1.12

Published 2019-10-16. Last modified 2026-06-17.