Medium severity · published Jul 9, 2025
CVE-2025-0139
Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability
6.3
CVSS
0.1%
EPSS
No
On KEV
Description
An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Autonomous Digital Experience Manager · Palo Alto Networks
5.6.0 before 5.6.7 · source: vendor
Affected product
AD
Autonomous Digital Experience Manager
Palo Alto Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0139
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2025-0139
More from Autonomous Digital Experience Manager
8.8
CVE-2026-0233
Autonomous Digital Experience Manager: Improper validation of ADEM certificate