CVE-2026-0251 is a local privilege escalation vulnerability in GlobalProtect App versions 6.0, 6.2, and 6.3 across Windows, macOS, and Linux, allowing a low-privileged local user to escalate to SYSTEM or root via an untrusted search path weakness. Patches are available from Palo Alto Networks PSIRT; no workarounds exist. EPSS is very low and no active exploitation has been confirmed.