5.9
Medium
CVE-2026-0246 A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally…
Description
A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This allows the user to execute arbitrary code and read sensitive information otherwise accessible only to privileged accounts. The Prisma Access Agent on iOS, Android and Chrome OS are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Access Agent | Versions not published |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Prisma Access Agent
The 14 CVEs of Prisma Access Agent →
CVE-2026-0305
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user…
4.3
Medium
CVE-2026-0306
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent…
5.8
Medium
CVE-2026-0294
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…
6.0
Medium
CVE-2026-0293
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator…
5.6
Medium