EUVD-2026-57711
GHSA-pc3v-5r9c-7gm7
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
AV:A for adjacent-network-only reach; AC:H captures the MitM positioning or rogue gateway prerequisite (equivalent to AT:P in CVSS 4.0); PR:N as no attacker credentials needed; full C/I/A impact on successful exploitation.
Primary rating from Vendor (palo_alto).
CVSS VectorVendor: palo_alto
Lifecycle Timeline
3DescriptionCVE.org
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).
AnalysisAI
Out-of-bounds write in Palo Alto Networks GlobalProtect app exposes Windows, macOS, and Linux endpoints to arbitrary code execution at SYSTEM or root privilege levels when clients connect to an attacker-controlled rogue gateway or are subjected to a man-in-the-middle attack. The vulnerability resides in the client-side VPN agent's processing of gateway-supplied data, where a crafted response can corrupt memory and hijack execution. No public exploit has been identified at time of analysis, and CISA has not confirmed active exploitation, but full confidentiality, integrity, and availability compromise is possible on any affected endpoint that connects through a manipulated gateway.
Technical ContextAI
CWE-787 (Out-of-bounds Write) describes a flaw where the program writes data beyond the intended buffer boundary, potentially overwriting adjacent memory structures such as return addresses or function pointers. In GlobalProtect, the affected code path processes data received from a GlobalProtect gateway during VPN session establishment or maintenance - traffic that the client implicitly trusts. The CVSS 4.0 vector encodes AV:A (Adjacent), meaning exploitation is bounded to local network segments or gateway-impersonation scenarios rather than arbitrary internet access. AT:P (Attack Requirements: Present) captures the prerequisite that the attacker must have achieved MitM positioning or must control a gateway the client will contact. CPE strings cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:*:*:* cover all currently catalogued platform variants of the app without bounding version ranges, indicating the advisory itself must be consulted for exact scope. The affected platforms include Windows (SYSTEM privilege escalation path), macOS, and Linux (root privilege escalation path).
RemediationAI
Consult the Palo Alto Networks security advisory at https://security.paloaltonetworks.com/CVE-2026-0297 for the specific patched GlobalProtect app versions and upgrade instructions - the available intelligence data does not provide bounded fix versions, so the advisory is the authoritative source. As immediate compensating controls prior to patching: enforce strict TLS certificate validation on GlobalProtect gateway connections and deploy gateway certificate pinning to prevent rogue gateway impersonation; monitor endpoint DNS and ARP tables for signs of poisoning or MitM infrastructure. Restrict GlobalProtect clients to connect only to pre-approved gateway IP ranges via local firewall policy, which reduces but does not eliminate the AV:A attack surface. Note that these controls address the MitM positioning requirement (AT:P) rather than the buffer overflow itself - patching remains the only definitive remediation.
More in Globalprotect App
View allLocal privilege escalation in Palo Alto Networks GlobalProtect app (Windows, macOS, and Linux) allows any local non-admi
Multiple local privilege escalation flaws in Palo Alto Networks GlobalProtect App on Windows, macOS, and Linux allow any
Local privilege escalation vulnerabilities in Palo Alto Networks GlobalProtect App on Windows, macOS, and Linux allow a
Remote code execution in Palo Alto Networks GlobalProtect app on Windows allows a network-adjacent man-in-the-middle att
Buffer overflow in Palo Alto Networks GlobalProtect App (versions 6.0 through 6.3) allows an adjacent-network attacker p
Improper certificate validation in Palo Alto Networks GlobalProtect App exposes macOS and Android users to adversary-in-
Improper certificate validation in Palo Alto Networks GlobalProtect app allows an unauthenticated attacker with an estab
GlobalProtect app on macOS exposes administrator-configured passcodes - used to restrict disabling, disconnecting, or un
Privilege escalation to root in Palo Alto Networks GlobalProtect App on macOS is enabled by a race condition exploitable
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today