CVE-2026-0302

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Score

CVSS 4.0 1.1 Low

Status

Awaiting Analysis - psirt@paloaltonetworks.com

Published

2026-09-10

Last modified

2026-09-10

Weaknesses

CWE-78

Affected products

• Checkov By Prisma Cloud (Palo Alto Networks)

References

• https://security.paloaltonetworks.com/CVE-2026-0302