CVE-2026-0251: Palo Alto Networks Globalprotect

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Affected products

• Palo Alto Networks Globalprotect: from 6.0.0, before 6.0.11 (fixed in 6.0.11); from 6.0.0, before 6.0.13 (fixed in 6.0.13); from 6.2.0, before 6.2.8 (fixed in 6.2.8); from 6.3.0, before 6.3.3 (fixed in 6.3.3); version 6.2.8 only; version 6.3.3 only

Published 2026-05-13. Last modified 2026-07-14.