CVE-2025-0140 - GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Back Back to CVE browser

MEDIUM

GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Published Jul 9, 2025

6.8

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.

The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Affected products

Vendor Palo Alto Networks Product GlobalProtect App Default
unaffected
- Version
  6.0.0
  Status
  affected
  Constraints
  -
- Version
  6.1.0
  Status
  affected
  Constraints
  -
- Version
  6.2.0
  Status
  affected
  Constraints
  <6.2.8-h2 (6.2.8-c243)
- Version
  6.3.0
  Status
  affected
  Constraints
  <6.3.3-h1 (6.3.3-c650)

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

GlobalProtect App

unaffected

Version	Status	Constraints
6.0.0	affected	-
6.1.0	affected	-
6.2.0	affected	<6.2.8-h2 (6.2.8-c243)
6.3.0	affected	<6.3.3-h1 (6.3.3-c650)

Remediation

Vendor solution

Version Minor Version Suggested Solution

GlobalProtect App 6.3 on macOS

6.3.0 through 6.3.3 Upgrade to 6.3.3-h1 (6.3.3-c650) or later.

GlobalProtect App 6.2 on macOS

6.2.0 through 6.2.8 Upgrade to 6.2.8-h2 (6.2.8-c243) or later. GlobalProtect App 6.1 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App 6.0 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App on Android, iOS, Linux, Windows No action needed.GlobalProtect UWP App No action needed.

Weaknesses (1)

CWE-266

Incorrect Privilege Assignment