CVE-2025-0134

Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM PUBLISHED

Description (CNA)

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 26.0.0 before 26.0.119

CWE

CWE-94

References

https://security.paloaltonetworks.com/CVE-2025-0134

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.