Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0245 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · paloaltonetworksNVD modified 2026-10-26 14:10
Affected (CPE criteria) 1
cpe:2.3:a:paloaltonetworks:prisma_access_agent:*:*:*:*:*:*:*:*
References 1
- https://security.paloaltonetworks.com/CVE-2026-0245 Vendor Advisory