Advisoriesby IbisPalo Alto NetworksCVE-2026-0292
Palo Alto Networks Prisma Access Agent: authentication bypass
Fix: upgrade to 26.3 or later
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic.
The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Prisma Access Agent Product | < 26.3 | 26.3 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:Amber
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-290