CVE-2026-0295 MEDIUM

CVE-2026-0295: GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Vendor Palo Alto Networks
Product GlobalProtect App
Weakness CWE-362
Published August 13, 2026
Last update August 13, 2026
View on NVD All CVEs

CVSS base score

4.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Key dates

02Disclosure timeline

August 13, 2026 CVE published
August 13, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-24377 Autoptimize < 2.7.8 - Race Condition leading to RCE CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition CVE-2025-47545 WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability CVE-2026-32398 WordPress TeraWallet – For WooCommerce plugin <= 1.5.15 - Race Condition vulnerability CVE-2025-59577 WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability