CVE-2026-0291 — Prisma Access Agent: Authenticated Limited File Deletion on Linux

CVE-2026-0291

Prisma Access Agent: Authenticated Limited File Deletion on Linux PUBLISHED

Description (CNA)

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 0 before 26.2.2
Palo Alto Networks / Prisma Access Agent	unaffected All

CWE

CWE-59

References

https://security.paloaltonetworks.com/CVE-2026-0291

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.