CVE-2026-0292 — Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows

CVE-2026-0292

Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows PUBLISHED

Description (CNA)

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 0 before 26.3
Palo Alto Networks / Prisma Access Agent	unaffected All

CWE

CWE-290

References

https://security.paloaltonetworks.com/CVE-2026-0292

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.