CVE-2026-0291
LowCVSS 1.1Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.
Risk Assessment
A local user can delete system files, potentially disrupting the agent's operation and potentially compromising system security.
Recommendation
Update Prisma Access Agent to the patched version and restrict local user privileges.
Original NVD description (English source)
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.