VULNERABILITY INTELLIGENCE
CVE-2025-0119
EPSS probability0.56%
CISA KEVNot currently listed
Published2025-04-11
Last modified2026-06-17
Description
A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.
Weakness classification
- psirt@paloaltonetworks.com: CWE-78