CVE-2026-0306 — Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows

CVE-2026-0306

Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows PUBLISHED

Description (CNA)

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 0 before 26.2
Palo Alto Networks / Prisma Access Agent	unaffected All before 6.3.3-h15

CWE

CWE-693

References

https://security.paloaltonetworks.com/CVE-2026-0306

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.