CVE-2025-0120Medium

CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Published
April 9, 2025
Last Modified
May 2, 2025

🔗 CVE IDs covered (1)

CVE-2025-0120 →

📋 Description

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.

🎯 Affected products2

  • GlobalProtect App
  • GlobalProtect UWP App

✅ Remediation

VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on Windows Upgrade to 6.3.3 or later GlobalProtect App 6.2 on Windows Upgrade to 6.2.7-1077 or 6.2.8 or later GlobalProtect App 6.1 on Windows Upgrade to 6.2.8 or later or upgrade to 6.3.3 or later GlobalProtect App 6.0 on Windows Upgrade to 6.2.8 or later or upgrade to 6.3.3 or later GlobalProtect App on macOS No action needed GlobalProtect App on Linux No action needed GlobalProtect App on iOS No action needed GlobalProtect App on Android No action needed GlobalProtect UWP App No action needed Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)