AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Palo Alto NetworksCVE-2026-0291

Palo Alto Networks Prisma Access Agent: link following

Palo Alto Networks

CVE-2026-0291 · Published Aug 13, 2026 · updated Sep 9, 2026

Low1.1
Fix: upgrade to 26.2.2 or later
Palo Alto Networks advisory

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent.

The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Affected versions

PackageAffectedFixed in
Prisma Access Agent
Product
< 26.2.226.2.2
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-59

More Palo Alto Networks advisories

All Palo Alto Networks
Low 1.7Aug 13Palo Alto Networks Cloud NGFW: information disclosureCVE-2026-0301fixed in 11.1.16-h1 +2Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: buffer overflowCVE-2026-0297fixed in 6.3.3-h15 +4Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: improper input validationCVE-2026-0298fixed in 6.3.3-h14 +2Medium 5.9Aug 13Palo Alto Networks GlobalProtect App: privilege escalationCVE-2026-0299fixed in 6.3.3-h15 +3Medium 5.6Aug 13Palo Alto Networks Prisma: local attacker could bypass the anti-tamper...CVE-2026-0293fixed in 26.3Medium 6.0Aug 13Palo Alto Networks Prisma Access Agent: privilege escalationCVE-2026-0294fixed in 26.3