1.1
Low
CVE-2026-0291 An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on…
Description
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Access Agent | Versions not published |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Prisma Access Agent
The 14 CVEs of Prisma Access Agent →
CVE-2026-0305
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user…
4.3
Medium
CVE-2026-0306
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent…
5.8
Medium
CVE-2026-0294
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…
6.0
Medium
CVE-2026-0293
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator…
5.6
Medium