CVE-2025-2183 MEDIUM

CVE-2025-2183: GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

Vendor Palo Alto Networks
Product GlobalProtect App
Weakness CWE-295
Published August 13, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

What the vulnerability does

01Description

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.

Key dates

02Disclosure timeline

August 13, 2025 CVE published
February 26, 2026 Record updated