CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

Score

CVSS 4.0 4.8 Medium

Status

Deferred - psirt@paloaltonetworks.com

Published

2025-08-13

Last modified

2025-08-13

Weaknesses

CWE-502

Affected products

• Checkov By Prisma Cloud (Palo Alto Networks)

References

• https://security.paloaltonetworks.com/CVE-2025-2180