CVE-2025-0127

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Score

CVSS 4.0 7.1 High

Status

Deferred - psirt@paloaltonetworks.com

Published

2025-04-11

Last modified

2025-04-11

Weaknesses

CWE-78

Affected products

• Cloud Ngfw (Palo Alto Networks)
• Prisma Access (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2025-0127