Palo Alto Networks GlobalProtect App Privilege Assignment Vulnerability on macOS

A vulnerability allowing incorrect privilege assignment has been identified in the Palo Alto Networks GlobalProtect App for macOS. This issue enables a locally authenticated non-administrative user to disable the application. Notably, this vulnerability does not affect the GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS, or the GlobalProtect UWP app.

Impact

Exploitation of this vulnerability allows a non-administrative user to disable the GlobalProtect app, potentially disrupting VPN services and network security measures provided by the application.

Remediation

Users can upgrade to GlobalProtect App version 6.3.3 or later, 6.2.8 or later, or for versions 6.1 and 6.0 on macOS, upgrade to 6.2.8 or later or 6.3.3 or later. Instructions for downloading the updated GlobalProtect app can be found on the Palo Alto Networks website.