CVE-2025-0119 — Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM

CVE-2025-0119

Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM PUBLISHED

Description (CNA)

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 1.0.0 before 26.100.3

CWE

CWE-78

References

https://security.paloaltonetworks.com/CVE-2025-0119

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.