CVE-2025-0117 — Reliance on Untrusted Inputs in a Security Decision in Palo Alto Networks Globalprotect APP

CWE-807 — Reliance on Untrusted Inputs in a Security Decision4 documents4 sources
Severity
7.1HIGHNVD
EPSS
0.1%
top 73.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Palo Alto Networks Globalprotect APPPaloalto Globalprotect APPPaloalto Globalprotect UWP APP
Timeline
PublishedMar 12

Description

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

Affected Packages3 packages

▶CVEListV5palo_alto_networks/globalprotect_app6.3.0 — 6.3.3+3

🔴Vulnerability Details

2
GHSA
GHSA-vhjm-w3vw-g6jw: A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-admi↗2025-03-12
▶
CVEList
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability↗2025-03-12
▶

📋Vendor Advisories

1
Palo Alto
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability↗
▶
CVE-2025-0117 — Palo vulnerability | cvebase