CVE-2026-0293
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability in Palo Alto Networks Prisma Access Agent on Windows allows a local attacker with administrator privileges to bypass anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Risk Assessment
An attacker with administrator privileges can bypass security controls and access sensitive data or processes, potentially leading to system security compromise.
Recommendation
Update Prisma Access Agent to the latest patched version and implement additional access controls for administrators.
Original NVD description (English source)
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.