CVE-2026-0303

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File PUBLISHED

Description (CNA)

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Checkov by Prisma Cloud	affected 3.2.0 before 3.2.532

CWE

CWE-829

References

https://security.paloaltonetworks.com/CVE-2026-0303

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.