CVE-2026-0302

Checkov by Prisma Cloud: OS Command Injection Vulnerability PUBLISHED

Description (CNA)

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Checkov by Prisma Cloud	affected 3.2.0 before 3.2.502

CWE

CWE-78

References

https://security.paloaltonetworks.com/CVE-2026-0302

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.