CVE-2026-0295
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A race condition in the Palo Alto Networks GlobalProtect client on macOS allows a locally authenticated low-privileged attacker to escalate privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Risk Assessment
An attacker with local access can gain full control over the macOS system, potentially leading to data compromise and system integrity violation.
Recommendation
Immediately update the GlobalProtect client to the latest patched version and monitor macOS systems for unusual activity.
Original NVD description (English source)
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.