high7.0
CVE-2026-0295
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges …
Impact
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Globalprotect | before 6.0.15 from 6.2.0 before 6.2.8 from 6.3.0 before 6.3.3 Versions 6.2.8, 6.3.3 |