--- title: Palo Alto Global Protect Command Injection Vulnerability description: Palo Alto has disclosed a critical command injection vulnerability in its PAN OS operating system within the GlobalProtect feature. The vulnerability allows... canonical: https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Palo Alto Global Protect Command Injection Vulnerability | daily.dev og:description: Palo Alto has disclosed a critical command injection vulnerability in its PAN OS operating system within the GlobalProtect feature. The vulnerability allows... og:url: https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w og:image: https://api.daily.dev/og/posts/GlP69FP3w.png og:image:alt: Palo Alto Global Protect Command Injection Vulnerability og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Palo Alto Global Protect Command Injection Vulnerability **[Coralogix](https://daily.dev/sources/coralogix)** · 3 min read · 0 upvotes · 0 comments ## Summary Palo Alto has disclosed a critical command injection vulnerability in its PAN OS operating system within the GlobalProtect feature. The vulnerability allows unauthenticated attackers to execute code with root privileges on the firewall. Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are affected. Mitigations and hotfix releases are available. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#firewall](https://daily.dev/tags/firewall) [View this post on daily.dev](https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Palo Alto Global Protect Command Injection Vulnerability","url":"https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w"},"datePublished":"2024-04-25T17:00:27.923Z","dateModified":"2024-05-09T09:27:15.675Z","description":"Palo Alto has disclosed a critical command injection vulnerability in its PAN OS operating system within the GlobalProtect feature. The vulnerability allows...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1de7df21f697ac6e6ea7457f1fb21a98?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1de7df21f697ac6e6ea7457f1fb21a98?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Coralogix","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Coralogix","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/845e144195e24a50982cdb4fd3dc9cde","url":"https://daily.dev/sources/coralogix"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/palo-alto-global-protect-command-injection-vulnerability-glp69fp3w","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"firewall","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Coralogix","item":"https://daily.dev/sources/coralogix"},{"@type":"ListItem","position":3,"name":"Palo Alto Global Protect Command Injection Vulnerability"}]} ```