CVE-2026-0295 — GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The Glob…
Published: 2026-08-13 · CVSS: 4.1 · CVSS 4.0
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7