Back security.paloaltonetworks.com

According to a post

security.paloaltonetworks.com • August 13, 2026

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

No special configuration is required to be affected by this issue.

CVSS-BT: 6.0 / CVSS-B: 8.5 ( CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:C/RE:M/U:Amber )

Palo Alto Networks is not aware of any malicious exploitation of this issue.

CWE-427: Uncontrolled Path Element

CAPEC-233 Privilege Escalation

Version Minor Version Suggested Solution Prisma Access Agent on Windows 24.0 through 26.2.2 Upgrade to 26.3 or later. Prisma Access Agent on macOS 24.0 through 26.2.2 Upgrade to 26.3 or later. Prisma Access Agent on Linux No action needed. Prisma Access Agent on iOS No action needed. Prisma Access Agent on Android No action needed. Prisma Access Agent on Chrome OS No action needed.

No known workarounds exist for this issue.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Palo Alto Networks GlobalProtect App Disclosed On August 14, 2026, Palo Alto Networks disclosed four critical vulnerabilities (CVE-2026-0296, CVE-2026-0297, CVE-2026-0298, CVE-2026-0299) in the GlobalProtect app affecting Windows, macOS, and Linux systems. These vulnerabilities include a buffer overflow, improper certificate validation, local privilege escalation, and improper input validation. Attackers could exploit these vulnerabilities to execute arbitrary code with elevated privileges, impacting system security. The vulnerabilities do not affect the GlobalProtect app on iOS, Android, or Chrome OS. Palo Alto Networks is not aware of any active exploitation of these issues. Users are advised to upgrade to the latest versions of the GlobalProtect app to mitigate risks. Specific versions affected include 6.0.0 through 6.3.3-h14 across various platforms. The CVSS scores range from 4.5 to 8.5, indicating varying levels of severity. 5 sources 68

Extracted Entities

According to a post

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (6)