Description
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtectâ„¢ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
Vendor Workaround
No known workarounds or mitigations exist for this issue.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0324 |
|
History
Wed, 11 Nov 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtectâ„¢ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. | |
| Title | GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows | |
| First Time appeared |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| Weaknesses | CWE-266 | |
| CPEs | cpe:2.3:a:opswat:metadefender_endpoint_security_sdk:*:*:*:*:*:Windows:*:* | |
| Vendors & Products |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| References |
| |
| Metrics |
cvssV4_0
|
Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2026-11-11T20:02:33.834Z
Reserved: 2025-11-03T20:46:26.182Z
Link: CVE-2026-0324
No data.
Status : Received
Published: 2026-11-11T20:16:59.480
Modified: 2026-11-11T20:16:59.480
Link: CVE-2026-0324
No data.
OpenCVE Enrichment
No data.
Weaknesses