Specific versions and feature configurations of Palo Alto Networks PAN-OS GlobalProtect contain a command-injection vulnerability resulting from arbitrary file creation. An unauthenticated attacker can exploit it to execute arbitrary code with root privileges on the firewall; Cloud NGFW, Panorama appliances, and Prisma Access are not affected.

https://www.cve.org/CVERecord?id=CVE-2024-3400