Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2025-0117

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

At a glance

Severity
HIGH 7.1
EPSS
EPSS 0.16 % · percentile 6 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
palo_alto
NVD status
Deferred

Description

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected.

Scores

VersionScoreVectorScored by
CVSS 4.0HIGH 7.1CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amberpalo_alto
CVSS 4.0HIGH 7.1CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:AmberNVD · psirt@paloaltonetworks.com (Secondary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected products

ProductVersions
Palo Alto Networks · GlobalProtect Appaffected 6.3.0 < 6.3.3 ; affected 6.2.0 < 6.2.6 ; affected 6.1.0 < 10.2.14 ; affected 6.0.0 < 10.1.14-h11
Palo Alto Networks · GlobalProtect Appunaffected All < 6.3.3
Palo Alto Networks · GlobalProtect UWP Appunaffected All

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD