VULNERABILITY INTELLIGENCE
CVE-2025-0134
EPSS probability0.53%
CISA KEVNot currently listed
Published2025-05-14
Last modified2026-06-17
Description
A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.
Weakness classification
- psirt@paloaltonetworks.com: CWE-94