CVE-2026-0291

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-08-13

Last modified

2026-10-23

Weaknesses

CWE-59

Affected products

• Prisma Access Agent (Palo Alto Networks)
• Prisma Access Agent (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0291