EUVD-2026-36147
GHSA-wmww-3qhp-47r4
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
Local access and low privileges required; scope changes to elevated privilege level enabling full system compromise with no network vector.
Primary rating from Vendor (palo_alto).
CVSS VectorVendor: palo_alto
Lifecycle Timeline
3DescriptionCVE.org
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges.
This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.
AnalysisAI
Privilege escalation in Palo Alto Networks Prisma Access Agent on Linux allows a locally authenticated low-privileged user to execute arbitrary code with elevated privileges, achieving full confidentiality, integrity, and availability compromise of the affected system. The vulnerability is rooted in CWE-732 (Incorrect Permission Assignment for Critical Resource) and is strictly scoped to Linux deployments - the Windows, macOS, iOS, Android, and ChromeOS agent variants are confirmed unaffected by the vendor. No public exploit code has been identified at time of analysis, and the CVSS 4.0 supplemental metric E:U (Exploitation Unlikely) further tempers immediate mass-exploitation risk, though the complete local system impact warrants timely patching for multi-user Linux environments.
Technical ContextAI
CWE-732 (Incorrect Permission Assignment for Critical Resource) indicates that one or more files, directories, binaries, or shared resources installed or used by the Prisma Access Agent on Linux carry overly permissive access controls. On Linux, this class of flaw commonly manifests as world-writable files in agent installation directories, SUID/SGID binaries with exploitable behaviors, or privileged processes that load code from paths controllable by non-root users. The affected CPE (cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:*:*:*) covers all tracked versions of the agent software on Linux; the platform-specific exclusions stated by Palo Alto suggest the root cause is tied to Linux filesystem permission handling rather than a cross-platform application logic flaw. The Prisma Access Agent is an endpoint VPN/ZTNA client component of the broader Prisma Access SASE platform.
RemediationAI
Consult the Palo Alto Networks security advisory at https://security.paloaltonetworks.com/CVE-2026-0271 for the specific patched version of Prisma Access Agent on Linux and apply the vendor-supplied update as the primary remediation; no exact fixed version number was available in the intelligence data provided and one should not be assumed. As a compensating control prior to patching, restrict interactive local shell access on Linux endpoints running the Prisma Access Agent to only trusted administrative accounts, reducing the set of users who can trigger the privilege escalation - note this may conflict with standard end-user VPN workflows if those users require direct system access. Security teams can also audit installation directory and binary permissions associated with the agent (e.g., scanning for world-writable paths or unexpected SUID/SGID bits under the agent's install prefix) and manually tighten them, though this risks breaking agent functionality and should be tested in a non-production environment first. Deploying auditd rules or EDR telemetry to alert on unexpected privilege escalation events on Linux hosts running the agent provides a detection-layer compensating control with no functional side effects.
More in Prisma Access Agent
View allImproper certificate validation in Palo Alto Networks Prisma Access Agent versions below 26.2.1 on Android and Chrome OS
Privilege escalation via an uncontrolled search path (CWE-427) in Palo Alto Networks Prisma Access Agent on Windows and
Authorization bypass in Palo Alto Networks Prisma Access Agent's Endpoint DLP component permits a locally authenticated
Local privilege escalation in Palo Alto Networks Prisma Access Agent (all versions prior to 26.2.1) allows any locally a
Multiple protection mechanism failures in the Data Loss Prevention (DLP) component of Palo Alto Networks Prisma Access A
Improper certificate validation in the Palo Alto Networks Prisma Access Agent for iOS exposes VPN tunnel traffic to inte
Anti-tamper protection bypass in Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to gain
Security control bypass in Palo Alto Networks Prisma Access Agent for Linux enables a local, low-privileged attacker to
Prisma Access Agent on Windows and macOS exposes sensitive configuration data and credentials to local low-privileged us
Authentication bypass in the Windows network driver of Palo Alto Networks Prisma Access Agent allows a local administrat
Symlink-following (CWE-59) in Palo Alto Networks Prisma Access Agent on Linux allows a local low-privileged user to dele
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today