VULNERABILITY INTELLIGENCE

CVE-2026-0291

CVSS score4.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-08-13
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-59

Primary references