An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.
Credits
Palo Alto Networks thanks AIG Red Team and Stephen Collyer for discovering and reporting this issue.