CVE-2026-0245

Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-200

Affected products

• Prisma Access Agent (Palo Alto Networks)
• Prisma Access Agent (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0245