CVE-2026-0295 | BDVDB-2026-358580 Detail
Palo Alto NetworksGlobalProtect App
Description#
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Impact#
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
Weaknesses#
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.