Palo Alto Networks GlobalProtect App Privilege Assignment Vulnerability on Linux

A vulnerability allowing incorrect privilege assignment has been identified in the Palo Alto Networks GlobalProtect App for Linux. This issue enables a locally authenticated non-administrative user to disable the application, contrary to the intended configuration restrictions. The vulnerability does not affect the GlobalProtect App on Windows, macOS, iOS, Android, Chrome OS, or the GlobalProtect UWP app.

Impact

Exploitation of this vulnerability allows a non-administrative user to disable the GlobalProtect application on Linux devices, potentially disrupting VPN connectivity and access to resources protected by the VPN.

Remediation

Users can upgrade to GlobalProtect App version 6.2.9 or later on Linux. For those using GlobalProtect App versions 6.1 or 6.0 on Linux, the same upgrade to version 6.2.9 or later is recommended. No action is needed for GlobalProtect App users on Android, Chrome OS, iOS, macOS, or Windows.