An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0291 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.1 · paloaltonetworksNVD modified 2026-10-23 19:10
Affected (CPE criteria) 1
cpe:2.3:a:paloaltonetworks:prisma_access_agent:*:*:*:*:*:*:*:*
References 1
- https://security.paloaltonetworks.com/CVE-2026-0291 Vendor Advisory