CVE-2025-4228 — Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

CVE-2025-4228

Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability PUBLISHED

Description (CNA)

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 27.0.0 before 27.0.26

CWE

CWE-266

References

https://security.paloaltonetworks.com/CVE-2025-4228

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.