CVE-2025-0141

published 2025-07-09

CVE-2025-0141: An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to…

Priority P3 38 high 8.4 CVSS 4.0

AV L AC L AT N PR L UI N VC N VI H VA N SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE M U Amber

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows.

The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	—	—
palo_alto_networks	globalprotect_app	—	—
palo_alto_networks	globalprotect_app	>= 6.2.0 < 6.2.8-h2 (6.2.8-c243)	6.2.8-h2 (6.2.8-c243)
palo_alto_networks	globalprotect_app	>= 6.2.0 < 6.2.8	6.2.8
palo_alto_networks	globalprotect_app	>= 6.3.0 < 6.3.3-h1 (6.3.3-c650)	6.3.3-h1 (6.3.3-c650)
paloalto	globalprotect_app	—	—
paloalto	globalprotect_uwp_app	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-426