CVE-2025-4232Medium

CVE-2025-4232 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

Published
June 11, 2025
Last Modified
July 16, 2025

🔗 CVE IDs covered (1)

CVE-2025-4232 →

📋 Description

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

🎯 Affected products1

  • GlobalProtect App

✅ Remediation

VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on macOS 6.3.0 through 6.3.2 Upgrade to 6.3.3 or later. GlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-223 Upgrade to 6.2.8-c243 or later. GlobalProtect App 6.1 on macOS Upgrade to 6.2.8-c243or 6.3.3 or later. GlobalProtect App 6.0 on macOS Upgrade to 6.2.8-c243 or 6.3.3 or later. GlobalProtect App on Windows No action needed. GlobalProtect App on Linux No action needed. GlobalProtect App on Android No action needed. GlobalProtect App on iOS No action needed. GlobalProtect App on Chrome OS   No action needed. Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)