CVE-2025-0135Low

CVE-2025-0135 GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App

Published
May 14, 2025
Last Modified
July 31, 2025

🔗 CVE IDs covered (1)

CVE-2025-0135 →

📋 Description

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ app on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

🎯 Affected products2

  • GlobalProtect App
  • GlobalProtect UWP App

✅ Remediation

VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on macOS Upgrade to 6.3.3 or later GlobalProtect App 6.2 on macOS Upgrade to 6.2.8 or later GlobalProtect App 6.1 on macOS Upgrade to 6.2.8 or later or 6.3.3 or later GlobalProtect App 6.0 on macOS Upgrade to 6.2.8 or later or 6.3.3 or later GlobalProtect App on Linux Not Applicable GlobalProtect App on Windows Not Applicable GlobalProtect App on iOS Not Applicable GlobalProtect App on Android Not Applicable GlobalProtect UWP App Not Applicable Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)