CVE-2026-0298

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app for Windows (affected versions not specified)

Description An improper input validation issue exists in the Windows Pre-Logon Access Provider (PLAP) component. This allows a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on the affected client. A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.