CVE-2026-0236 — Prisma Browser: Code Injection Enables Security Controls Bypass

CVE-2026-0236

Prisma Browser: Code Injection Enables Security Controls Bypass PUBLISHED

Description (CNA)

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Browser	affected 0 before 146.16.6.165

CWE

CWE-94

References

https://security.paloaltonetworks.com/CVE-2026-0236

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.