6.3
Medium
CVE-2025-0119 A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to…
Description
A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XDR Broker VM 1.0 | 1.0.0 → < 26.100.3 | 26.100.3 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Cortex XDR Broker VM
The 9 CVEs of Cortex XDR Broker VM →
CVE-2026-0304
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low…
4.8
Medium
CVE-2026-0276
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to…
1.1
Low
CVE-2026-0231
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to…
5.7
Medium
CVE-2025-2184
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share…
5.3
Medium