4.8
Medium
CVE-2025-2180 An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to…
Description
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Checkov by Prisma Cloud 3.2 | 3.2.0 → < 3.2.415 | 3.2.415 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Checkov by Prisma Cloud
The 6 CVEs of Checkov by Prisma Cloud →
CVE-2026-0311
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…
1.1
Low
CVE-2026-0312
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to…
4.3
Medium
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute…
1.1
Low
CVE-2026-0303
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when…
2.4
Low