CVE-2025-0105 — Expedition: Arbitrary File Deletion Vulnerability

CVE-2025-0105

Expedition: Arbitrary File Deletion Vulnerability PUBLISHED

Description (CNA)

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cloud NGFW	unaffected All
Palo Alto Networks / Expedition	affected 1 before 1.2.101
Palo Alto Networks / Panorama	unaffected All
Palo Alto Networks / PAN-OS	unaffected All
Palo Alto Networks / Prisma Access	unaffected All

CWE

CWE-73

References

https://security.paloaltonetworks.com/PAN-SA-2025-0001

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.