Skip to content
Palo Alto NetworksCVE-2026-0293

Palo Alto Networks Prisma: local attacker could bypass the anti-tamper...

Medium5.6CVE-2026-0293 · Published Aug 13, 2026 · updated Sep 9, 2026

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Palo Alto Networks advisory

Affected versions

PackageAffectedFixed in
Prisma Access Agent
Product
< 26.326.3
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:M/U:Amber
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-693

More Palo Alto Networks advisories

All Palo Alto Networks
Advisory
Palo Alto Networks Cloud NGFW: information disclosure
Low1.7Aug 13
Palo Alto Networks GlobalProtect App: buffer overflow
Medium5.2Aug 13
Palo Alto Networks GlobalProtect App: improper input validation
Medium5.2Aug 13
Palo Alto Networks GlobalProtect App: privilege escalation
Medium5.9Aug 13
Palo Alto Networks Prisma Access Agent: privilege escalation
Medium6.0Aug 13
Palo Alto Networks GlobalProtect App: race condition
Medium4.1Aug 13

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.