SB20260816155 - Privilege escalation in GlobalProtect App

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816155

SB20260816155 - Privilege escalation in GlobalProtect App

Published: August 16, 2026

Security Bulletin ID SB20260816155
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Untrusted search path (CVE-ID: CVE-2026-0299)

CWE-ID: CWE-426 - Untrusted Search Path

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to an untrusted search path in the GlobalProtect app when loading executables or libraries on a local system. A local user can place a malicious executable or library in a searched path to escalate privileges.

This issue can lead to execution of arbitrary commands with administrative privileges, including NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux.


Remediation

Install update from vendor's website.

References