Medium severity · published Oct 14, 2026
CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
5.9
CVSS
0.1%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
GlobalProtect App · Palo Alto Networks
6.2.0 before 6.2.8-h15; 6.3.0 before 6.3.3-h16 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0315
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0315
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2026-0315
More from GlobalProtect App
8.1
CVE-2026-0298
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
8.1
CVE-2026-0297
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
8.1
CVE-2026-0250
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
7.8
CVE-2026-0299
GlobalProtect App: Local Privilege Escalation Vulnerabilities
7.8
CVE-2026-0251
GlobalProtect App: Local Privilege Escalation Vulnerabilities