What is CVE-2025-2179?

CVE-2025-2179 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Which CVE IDs does CVE-2025-2179 cover?

CVE-2025-2179 covers the following CVE IDs: CVE-2025-2179. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2025-2179?

CVE-2025-2179 affects 2 products, including: GlobalProtect App; GlobalProtect UWP App.

CVE-2025-2179Medium

CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Vendor

Palo Alto Networks Security Advisories

Published

July 28, 2025

Last Modified

July 28, 2025

🔗 CVE IDs covered (1)

CVE-2025-2179 →

📋 Description

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

🎯 Affected products2

GlobalProtect App
GlobalProtect UWP App

✅ Remediation

VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.2 on Linux 6.2.0 through 6.2.8 Upgrade to 6.2.9 or later. GlobalProtect App 6.1 on Linux Upgrade to 6.2.9 or later. GlobalProtect App 6.0 on Linux Upgrade to 6.2.9 or later. GlobalProtect App on Android, ChromeOS, iOS, macOS, Windows No action needed. Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2025-2179