Prisma Access Agent CVE-2026-0248

The attacker must be positioned on the same adjacent network segment as the victim device (AV:A) - such as a shared Wi-Fi access point, VLAN, or local subnet - and cannot exploit this vulnerability over the internet. The victim must be running Prisma Access Agent version below 26.2.1 on Android or Chrome OS specifically; the flaw does not exist on macOS, Windows, Linux, or iOS agent builds. No authentication is required of the attacker (PR:N), and no user interaction is required (UI:N) beyond the victim initiating a normal VPN connection. The attacker must be able to obtain or generate a certificate for any domain signed by a Certificate Authority trusted by the victim device's OS trust store; this is the primary limiting factor, as it requires either access to a legitimate CA's issuance infrastructure, a device with an enterprise-managed rogue root CA installed, or a compromised subordinate CA.

The CVSS 4.0 score of 6.2 reflects a constrained but meaningful attack surface. The attack vector is Adjacent (AV:A), meaning exploitation requires the attacker to share a network segment with the victim - such as a shared Wi-Fi network, a hotel LAN, or a compromised corporate switch - and cannot be executed remotely over the internet. Complexity is low (AC:L), no privileges are required (PR:N), and no user interaction is needed (UI:N), which lowers the bar considerably once adjacency is achieved. Confidentiality and integrity impacts on the vulnerable system are both High (VC:H, VI:H), reflecting the ability to read and potentially manipulate VPN-tunneled traffic. EPSS at 0.00% (0th percentile) and SSVC Exploitation status of 'none' confirm no observed exploitation activity, making this low urgency operationally. However, a notable conflict exists: the CVSS 4.0 supplemental metric AU:Y (Automatable: Yes) disagrees with SSVC's Automatable: No determination - this discrepancy likely stems from the adjacency requirement making at-scale automated targeting impractical despite low per-target complexity. SSVC's 'no' is the more operationally relevant signal here. SSVC Technical Impact of 'total' is consistent with the ability to silently intercept VPN sessions. The overall picture: low urgency given no active exploitation and adjacency requirement, but the attack is realistic and impactful in targeted scenarios such as corporate espionage or surveillance in shared network environments.

An attacker positioned on the same Wi-Fi network as a corporate employee using Prisma Access Agent on an Android device - for example, at an airport or hotel - intercepts the VPN session establishment. The attacker presents a TLS certificate for any domain, issued by a certificate authority already trusted by the Android device (obtainable legitimately or via a rogue CA on an enterprise-managed device). Because the agent does not enforce hostname-specific validation, the certificate is accepted, and the attacker establishes themselves as a transparent proxy, capturing VPN tunnel contents including authentication tokens, session data, and sensitive corporate communications.