Auth bypass in Palo Alto Networks Prisma Access Agent
CVE-2026-0246
A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on…
Vulnerability class: Broken Access Control
EPSS: 0.000 (0.3th percentile) — read the EPSS interpretation.
Affected products
- Palo Alto Networks Prisma Access Agent — versions 0, All
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)