CVE-2026-0302
LowCVSS 1.1Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Risk Assessment
A local user could execute arbitrary system commands with the privileges of the Checkov process, potentially leading to privilege escalation or host compromise.
Recommendation
Update Checkov to a patched version and restrict local access to systems where Checkov is executed.
Other vulnerabilities in Checkov by Prisma Cloud
See all- CVE-2026-0312Medium
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
- CVE-2026-0311Low
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
- CVE-2026-0303Low
A code execution vulnerability in Palo Alto Networks Checkov by Prisma Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Original NVD description (English source)
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS