CVE-2025-4232 — GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalat…
Published: 2025-06-12 · CVSS: 8.5 · CVSS 4.0
An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7