CVE-2025-0131 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK

🗓️ 14 May 2025 18:06:45Reported by palo_altoType

Incorrect privilege management in GlobalProtect App allows local privilege escalation on Windows devices.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2025-0131	14 May 202519:15	–	attackerkb
BDU FSTEC	The vulnerability of the software development platform for endpoint protection, MetaDefender Endpoint Security SDK (formerly OESIS), and the software for secure remote access to data, Palo Alto Networks GlobalProtect App, for Windows operating systems, stems from deficiencies in access control. This allows attackers to enhance their privileges.	20 May 202500:00	–	bdu_fstec
Circl	CVE-2025-0131	14 May 202514:00	–	circl
CNNVD	Palo Alto Networks GlobalProtect 安全漏洞	14 May 202500:00	–	cnnvd
CVE	CVE-2025-0131	14 May 202518:06	–	cve
EUVD	EUVD-2025-14911	3 Oct 202520:07	–	euvd
NVD	CVE-2025-0131	14 May 202519:15	–	nvd
Positive Technologies	PT-2025-21208 · Palo Alto Networks +1 · Palo Alto Networks Globalprotect +1	14 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-0131	16 May 202519:07	–	redhatcve
Vulnrichment	CVE-2025-0131 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK	14 May 202518:06	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "MetaDefender Endpoint Security SDK",
    "vendor": "OPSWAT",
    "versions": [
      {
        "changes": [
          {
            "at": "4.3.4451",
            "status": "unaffected"
          }
        ],
        "lessThan": "4.3.4451",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
opswat	www.opswat.com/docs/mdsdk/release-notes/cve-2025-0131
security	www.security.paloaltonetworks.com/CVE-2025-0131

21 May 2025 21:11Current

CVSS 47.1

EPSS0.00179

CWE-266