CVE-2025-0131
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2025-05-14
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Interaction
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
AT:
Present
VC:
None
VI:
High
VA:
None
Description
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user also successfully exploits a race condition, which makes this vulnerability difficult to exploit.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| OPSWAT | MetaDefender Endpoint Security SDK | 4.3.0 < 4.3.4451 |
| OPSWAT | MetaDefender Endpoint Security SDK | 4.3.0 < 4.3.4451 |
References & Advisories (2)
vendor-advisory
third-party-advisory