CVE-2026-0295

A race condition in the Palo Alto Networks GlobalProtect client on macOS allows a locally authenticated low-privileged attacker to escalate privileges to root, potentially compromising the entire system. Organizations using the GlobalProtect client on macOS should prioritize this vulnerability to mitigate the risk of unauthorized access and potential exploitation. Other platforms, including Linux, Windows, iOS, Android, and Chrome OS, are not affected.