CVE-2026-0268 — Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

CVE-2026-0268

Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux PUBLISHED

Description (CNA)

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 0 before 26.2.1
Palo Alto Networks / Prisma Access Agent	unaffected All

CWE

CWE-424

References

https://security.paloaltonetworks.com/CVE-2026-0268

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.