CVE-2026-0307

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. This GlobalProtect app on iOS, Android and ChromeOS is not impacted.

  • Published Sep 10, 2026
  • CVSS 5.9 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-0307 at the National Vulnerability Database