CVE-2026-0251

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app versions prior to 6.3.3-h11

Description Multiple local privilege escalation flaws exist in the application due to the use of an untrusted search path. This allows a local, low-privileged user to escalate their privileges to NT AUTHORITYSYSTEM on Windows and root on macOS and Linux, enabling the execution of arbitrary commands with administrative privileges. Additionally, a technique exists to recover Active Directory credentials from an endpoint through privileged components of the software.

Recommendations Upgrade to GlobalProtect version 6.3.3-h11.