Skip to main content

Globalprotect CVE-2025-0135

MEDIUM
Incorrect Privilege Assignment (CWE-266)
2025-05-14 psirt@paloaltonetworks.com
5.2
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.2 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
X

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:41 vuln.today
CVE Published
May 14, 2025 - 19:15 nvd
MEDIUM 5.2

DescriptionCVE.org

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app.

The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

AnalysisAI

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. Rated medium severity (CVSS 5.2), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-266. An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. Affected products include: Paloaltonetworks Globalprotect.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-3661 HIGH POC
7.6 May 06

DHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7

CVE-2024-5921 HIGH POC
7.1 Nov 27

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect

CVE-2025-4232 HIGH
8.8 Jun 13

CVE-2025-4232 is an improper neutralization of wildcards vulnerability in Palo Alto Networks GlobalProtect app for macOS

CVE-2021-3057 HIGH
8.1 Oct 13

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the

CVE-2023-0009 HIGH
7.8 Jun 14

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u

CVE-2020-1989 HIGH
7.8 Apr 08

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global

CVE-2025-0120 HIGH
7.1 Apr 11

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices al

CVE-2019-17436 HIGH
7.1 Oct 16

A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlie

CVE-2024-2432 HIGH
7.0 Mar 13

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local

CVE-2020-2032 HIGH
7.0 Jun 10

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to ex

CVE-2024-8687 MEDIUM
6.9 Sep 11

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user

CVE-2017-15870 MEDIUM
6.7 Dec 11

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to

Share

CVE-2025-0135 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy