---
id: CVE-2026-0267
title: >-
  An information exposure vulnerability in the Palo Alto Networks GlobalProtect
  app on macOS enables a local user to learn the configured passcodes for
  disabling, disconnecting, or uninstalling the GlobalProtect app
summary: >-
  An information exposure vulnerability in the Palo Alto Networks GlobalProtect
  app on macOS enables a local user to learn the configured passcodes for
  disabling, disconnecting, or uninstalling the GlobalProtect app. After the
  passcode is …
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-532
vendor: paloaltonetworks
product: globalprotect
affected:
  - 'globalprotect >= 6.2.0, < 6.2.8'
  - 'globalprotect >= 6.3.0, < 6.3.3'
  - globalprotect = 6.2.8
  - globalprotect = 6.3.3
patched:
  - globalprotect 6.3.3
published: '2026-06-10'
updated: '2026-07-07'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-0267'
references:
  - url: 'https://security.paloaltonetworks.com/CVE-2024-8687'
    label: psirt@paloaltonetworks.com
  - url: 'https://security.paloaltonetworks.com/CVE-2026-0267'
    label: psirt@paloaltonetworks.com
tags:
  - nvd
epss: 0.00104
epssPercentile: 0.01163
ingestedAt: '2026-07-07T15:38:35.734Z'
---

## Overview

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

## Affected

- `globalprotect >= 6.2.0, < 6.2.8`
- `globalprotect >= 6.3.0, < 6.3.3`
- `globalprotect = 6.2.8`
- `globalprotect = 6.3.3`

## Remediation

Upgrade past the affected range:

- `globalprotect 6.3.3`