Palo Alto GlobalProtect Critical Flaws Let Attackers Execute Code

Key Takeaways

• Five critical vulnerabilities have been uncovered in Palo Alto Networks’ GlobalProtect VPN and endpoint agent.
• The flaws, including local privilege escalation and Active Directory password recovery, impact GlobalProtect versions 6.0, 6.2, and 6.3 across Windows, macOS, and Linux.
• CVE-2026-0251, a set of local privilege escalation issues, carries a CVSS 3.1 base score of 7.8.
• Proof-of-concept exploits for four of the five vulnerabilities are now publicly available.
• Palo Alto Networks has released patches, but the disclosure process itself has sparked debate over vendor-researcher coordination.

Critical Flaws Discovered in Palo Alto GlobalProtect, Including Privilege Escalation and AD Credential Recovery

A cybersecurity researcher has brought to light a series of five significant vulnerabilities impacting Palo Alto Networks’ GlobalProtect, a widely deployed VPN and endpoint agent. These security weaknesses could allow attackers to gain elevated privileges and even recover Active Directory passwords from compromised endpoints, posing substantial risks to enterprise networks globally.

Technical Details of the Vulnerabilities

The researcher, Martijn van Ramesdonk, initially reported these five issues to Palo Alto Networks in early April 2026. Two of these findings were subsequently consolidated into CVE-2026-0251, addressing local privilege escalation vulnerabilities within the GlobalProtect application. Palo Alto’s official advisory confirms that these specific bugs enable a low-privileged local user to escalate their permissions to NT AUTHORITYSYSTEM on Windows systems and to root on macOS and Linux. This grants an attacker who has already established a foothold on an endpoint the capability to execute arbitrary commands with full administrative control.

The National Vulnerability Database has assigned CVE-2026-0251 a CVSS 3.1 base score of 7.8, underscoring the severe implications of local privilege escalation in a widely adopted VPN client. Beyond these privilege escalation issues, van Ramesdonk’s research also revealed a method to directly extract a user’s Active Directory password from the endpoint. This is achieved by exploiting privileged components of GlobalProtect, a discovery that carries more immediate and profound implications for corporate identity infrastructure than typical local exploits.

Controversies Surrounding the Disclosure Process

The technical severity of these vulnerabilities is compounded by the researcher’s account of the disclosure journey. Van Ramesdonk alleges that the two vulnerabilities associated with CVE-2026-0251 were patched by Palo Alto Networks without prior notification to him and without proper credit in the accompanying advisory. This prompted him to publicly challenge the vendor’s handling of the disclosure.

Furthermore, two other identified vulnerabilities were reportedly deemed outside the scope of Palo Alto’s bug bounty program. A fifth vulnerability remains unpatched and undisclosed as remediation efforts continue. Van Ramesdonk detailed an extensive communication history, involving over 40 emails exchanged with Palo Alto’s Product Security Incident Response Team (PSIRT) and numerous missed or altered disclosure deadlines spanning several months. He characterizes this process as indicative of a flawed coordination model rather than a technical failure on the part of the vendor.

Impact and Mitigation

Four proof-of-concept exploits related to the disclosed flaws are now publicly available, with the fifth being withheld until an official patch is released by Palo Alto Networks. The affected GlobalProtect versions include multiple branches of 6.0, 6.2, and 6.3 across Windows, macOS, and Linux platforms. Palo Alto Networks has since published patched builds for each affected version, though the vendor states it is currently unaware of any active exploitation in the wild.

Endpoint and VPN software often holds a highly privileged position within enterprise networks, frequently integrating directly with Active Directory and other identity management systems. This intrinsic trust elevates the danger of local privilege escalation and credential-recovery bugs in these products, making them disproportionately critical compared to vulnerabilities found in less trusted applications. The researcher’s broader contention is that the accelerating pace of vulnerability discovery, partly fueled by advancements in artificial intelligence, is outpacing vendors’ abilities to validate, patch, and properly credit findings. This suggests an impending bottleneck where the ease of finding bugs contrasts sharply with the complexities of responsible, coordinated disclosure, which still relies heavily on human judgment, mature internal processes, and accountability.

What You Should Do

• Apply Patches Immediately: Organizations using Palo Alto Networks GlobalProtect versions 6.0, 6.2, or 6.3 on Windows, macOS, or Linux should update to the latest patched builds provided by Palo Alto Networks without delay.
• Monitor Endpoints: Enhance monitoring for unusual activity on endpoints running GlobalProtect, especially for attempts at local privilege escalation or access to Active Directory credentials.
• Review Access Controls: Re-evaluate and strengthen local access controls and permissions on workstations and servers where GlobalProtect is installed to minimize the impact of any potential compromise.
• Implement Least Privilege: Ensure that users and applications operate with the principle of least privilege to limit the scope of damage if an exploit is successful.
• Stay Informed: Continue to monitor official advisories from Palo Alto Networks and trusted cybersecurity news sources for any further updates or mitigation recommendations.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.