CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.

Score

CVSS 4.0 6.5 Medium

Status

Deferred - psirt@paloaltonetworks.com

Published

2025-05-14

Last modified

2026-02-26

Weaknesses

CWE-94

Affected products

• Cortex Xdr Broker Vm (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2025-0134