CVE-2025-2183 json
GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
published 2025-08-13 14 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-24616
- cvss
- 5.3
- version 4.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 2%
- public exploits
- 0
- none known
Summary
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.
Patch / fix
- Palo Alto Networks GlobalProtect App 6.2.8-h3 (6.2.8-c263), 6.3.3, 6.3.3-h2 (6.3.3-c676), 11.1.10
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 14 mo ago
Exploit prediction
0.13% chance of exploitation in the next 30 days, higher than 2% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 5.3 | CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber |
| CNA | 4.0 | 5.3 | CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:X/U:Amber |
Affected products
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks Global Protect UWP App
Classification
- Weakness
-
- CWE-295 Improper Certificate Validation
References
-
security.paloaltonetworks.com
/CVE-2025-2183
vendor-advisory
Sources
- CVE List CVE-2025-2183
- NVD CVE-2025-2183
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.