AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Palo Alto NetworksCVE-2026-0305

Palo Alto Networks Prisma Access Agent: information disclosure

Palo Alto Networks

CVE-2026-0305 · Published Sep 10, 2026

Medium4.3
Fix: upgrade to 26.2 or later
Palo Alto Networks advisory

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials.

The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.

Affected versions

PackageAffectedFixed in
Prisma Access Agent
Product
>= 24.0, < 26.226.2
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:M/U:Amber
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-200

More Palo Alto Networks advisories

All Palo Alto Networks
Low 2.4Sep 10Palo Alto Networks Checkov by Prisma Cloud: code executionCVE-2026-0303fixed in 3.2.532Medium 4.8Sep 10Palo Alto Networks Cortex XDR Broker VM: privilege escalationCVE-2026-0304fixed in 32.0.52Low 1.1Sep 10Palo Alto Networks Checkov by Prisma Cloud: command injectionCVE-2026-0302fixed in 3.2.502High 7.2Sep 10Palo Alto Networks Cloud NGFW: buffer overflowCVE-2026-0310fixed in 12.2.3 +4Medium 5.8Sep 10Palo Alto Networks Prisma: local user could bypass configured DLP policy...CVE-2026-0306fixed in 26.2Medium 5.9Sep 10Palo Alto Networks GlobalProtect App: privilege escalationCVE-2026-0307fixed in 6.3.3-h15 +2