CVE-2026-0305 — Prisma Access Agent: Information Disclosure Vulnerability on Linux

CVE-2026-0305

Prisma Access Agent: Information Disclosure Vulnerability on Linux PUBLISHED

Description (CNA)

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 24.0 before 26.2
Palo Alto Networks / Prisma Access Agent	unaffected All before 6.3.3-h15

CWE

CWE-200

References

https://security.paloaltonetworks.com/CVE-2026-0305

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.