An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtectâ„¢ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM.
Project Subscriptions
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No known workarounds or mitigations exist for this issue.
References
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0324 |
|
History
Wed, 11 Nov 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtectâ„¢ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. | |
| Title | GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows | |
| First Time appeared |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| Weaknesses | CWE-266 | |
| CPEs | cpe:2.3:a:opswat:metadefender_endpoint_security_sdk:*:*:*:*:*:Windows:*:* | |
| Vendors & Products |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2026-11-11T20:02:33.834Z
Reserved: 2025-11-03T20:46:26.182Z
Link: CVE-2026-0324
No data.
Status : Received
Published: 2026-11-11T20:16:59.480
Modified: 2026-11-11T20:16:59.480
Link: CVE-2026-0324
No data.
OpenCVE Enrichment
No data.
Weaknesses