CVE-2026-0294
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent on Windows and macOS devices allows a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.
Risk Assessment
A local user can gain elevated privileges and execute malicious code, potentially leading to system compromise or network attack escalation.
Recommendation
Update Prisma Access Agent to the patched version as soon as possible and restrict local access to devices.
Original NVD description (English source)
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.