CVE-2026-0295

EUVD-2026-57709
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.

The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.07%
Affected Products (NVD)
VendorProductVersion
paloaltonetworksglobalprotect
𝑥
< 6.0.15
paloaltonetworksglobalprotect
6.2.0 ≤
𝑥
< 6.2.8
paloaltonetworksglobalprotect
6.3.0 ≤
𝑥
< 6.3.3
paloaltonetworksglobalprotect
6.2.8
paloaltonetworksglobalprotect
6.2.8:h1
paloaltonetworksglobalprotect
6.2.8:h10
paloaltonetworksglobalprotect
6.2.8:h11
paloaltonetworksglobalprotect
6.2.8:h12
paloaltonetworksglobalprotect
6.2.8:h2
paloaltonetworksglobalprotect
6.2.8:h3
paloaltonetworksglobalprotect
6.2.8:h4
paloaltonetworksglobalprotect
6.2.8:h5
paloaltonetworksglobalprotect
6.2.8:h6
paloaltonetworksglobalprotect
6.2.8:h7
paloaltonetworksglobalprotect
6.2.8:h8
paloaltonetworksglobalprotect
6.2.8:h9
paloaltonetworksglobalprotect
6.3.3
paloaltonetworksglobalprotect
6.3.3:h1
paloaltonetworksglobalprotect
6.3.3:h11
paloaltonetworksglobalprotect
6.3.3:h12
paloaltonetworksglobalprotect
6.3.3:h2
paloaltonetworksglobalprotect
6.3.3:h3
paloaltonetworksglobalprotect
6.3.3:h4
paloaltonetworksglobalprotect
6.3.3:h6
paloaltonetworksglobalprotect
6.3.3:h7
paloaltonetworksglobalprotect
6.3.3:h8
paloaltonetworksglobalprotect
6.3.3:h9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.paloaltonetworks.com/CVE-2026-0295