Prisma Browser CVE-2026-0289

Exploitation requires physical or session-level local access to an endpoint running Palo Alto Networks Prisma Browser with the Account Protection feature active. The CVSS 4.0 AT:P (Attack Requirements: Present) metric confirms a specific target condition - likely a particular Account Protection policy state, configuration, or runtime mode - must be present on the target system; not all Prisma Browser deployments will be exploitable. No existing authentication or elevated privileges are required (PR:N), and no user interaction is needed (UI:N). The bypass yields only low confidentiality exposure (VC:L); no integrity or availability impact applies. Remote exploitation is ruled out by the local attack vector (AV:L). The specific nature of the AT:P condition is not detailed in available data and should be confirmed via the vendor advisory.

Real-world risk is very low. The CVSS 4.0 score of 0.5 is grounded in a local attack vector (AV:L), specific attack requirement conditions (AT:P) that must be present on the target, and only low confidentiality impact to the vulnerable system (VC:L) with no integrity or availability consequences whatsoever. The supplemental Exploit Maturity metric E:U (Unreported) confirms no known exploitation attempts, and the U:Amber traffic light designation suggests a controlled disclosure with limited distribution. The vulnerability is absent from the CISA KEV catalog and no proof-of-concept code has been identified. The AT:P condition is a meaningful limiter: exploitation is not possible against all Prisma Browser deployments - a specific configuration or runtime state must be present. The V:D (Value Density: Diffuse) and RE:M (Response Effort: Medium) supplemental metrics further characterize this as a low-yield finding requiring moderate remediation effort. CVSS semantics suggest no authentication is required (PR:N), but this must be understood in the local-access context - an attacker already has a foothold on the endpoint. This is not a high-priority emergency; standard patch cadence is appropriate.

A local user on a managed endpoint running Palo Alto Networks Prisma Browser identifies and triggers the specific target condition required by the Account Protection bypass, then accesses low-sensitivity credential data that the Account Protection feature was intended to restrict. The attacker gains no integrity control and cannot affect system availability through this path. No public exploit code has been released, and the attack requires both local endpoint presence and a specific deployment condition, limiting opportunistic use.