GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| OPSWAT | MetaDefender Endpoint Security SDK | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Opswat | Metadefender Endpoint Security Sdk |
|
Vendor Workaround
No known workarounds or mitigations exist for this issue.
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.132% probability within 30 days)
Key SSVC decision points have not yet been added.
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0324 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. | |
| Title | GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows | |
| First Time appeared |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| Weaknesses | CWE-266 | |
| CPEs | cpe:2.3:a:opswat:metadefender_endpoint_security_sdk:*:*:*:*:*:Windows:*:* | |
| Vendors & Products |
Opswat
Opswat metadefender Endpoint Security Sdk |
|
| References |
| |
| Metrics |
cvssV4_0
|
No data.
No data.
OpenCVE enrichment
Updated: Nov 13, 2026, 12:15 AM