EUVD-2026-57705
GHSA-4rm3-vj49-c7j8
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Local vector with low privilege required; integrity and availability both low due to limited file deletion scope and agent disablement only; no confidentiality impact.
Primary rating from Vendor (palo_alto).
CVSS VectorVendor: palo_alto
Lifecycle Timeline
2DescriptionCVE.org
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent.
The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.
AnalysisAI
Symlink-following (CWE-59) in Palo Alto Networks Prisma Access Agent on Linux allows a local low-privileged user to delete a limited set of system files and disable the agent entirely. Only Linux deployments are affected - macOS, Windows, iOS, Android, and Chrome OS are explicitly confirmed safe by the vendor. No public exploit code or active exploitation (CISA KEV) has been identified; the CVSS 4.0 supplemental vector classifies exploitation as unlikely (E:U) with Amber urgency, making this a low-priority but genuine patch target for Linux endpoint fleets.
Technical ContextAI
CWE-59 (Improper Link Resolution Before File Access) is a symlink-following vulnerability class in which a privileged process resolves a file path without verifying that the target has not been substituted with a symbolic link by an unprivileged user between the check and the access - a classic TOCTOU (Time-of-Check-Time-of-Use) pattern. The Prisma Access Agent is Palo Alto Networks' endpoint ZTNA and VPN client, which runs with elevated privileges on managed endpoints to enforce network security policy. On Linux, the agent performs privileged file operations (such as updates, cleanup, or log management) and fails to adequately harden these paths against symlink substitution, allowing a pre-placed symlink to redirect the operation to attacker-chosen system files. The affected product spans all versions per CPE cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:*:*:*, scoped exclusively to the Linux platform.
RemediationAI
Consult the Palo Alto Networks security advisory at https://security.paloaltonetworks.com/CVE-2026-0291 for the patched Prisma Access Agent version, which is not confirmed in currently available data - upgrade to the vendor-specified fixed release as the primary remediation. As an interim compensating control, enabling Linux kernel symlink protection (set fs.protected_symlinks=1 via sysctl) hardens the OS against symlink-following attacks system-wide, though this may affect other applications that rely on symlink traversal in shared directories. Restricting local user access to Linux endpoints running the agent reduces attack surface, since exploitation requires an active local low-privileged session. Monitor Prisma Access Agent process health and alert on unexpected agent termination or file deletions within agent-managed directories as indicators of exploitation. Note that none of these mitigations substitute for patching once a fixed version is released.
More in Prisma Access Agent
View allImproper certificate validation in Palo Alto Networks Prisma Access Agent versions below 26.2.1 on Android and Chrome OS
Privilege escalation via an uncontrolled search path (CWE-427) in Palo Alto Networks Prisma Access Agent on Windows and
Privilege escalation in Palo Alto Networks Prisma Access Agent on Linux allows a locally authenticated low-privileged us
Authorization bypass in Palo Alto Networks Prisma Access Agent's Endpoint DLP component permits a locally authenticated
Local privilege escalation in Palo Alto Networks Prisma Access Agent (all versions prior to 26.2.1) allows any locally a
Multiple protection mechanism failures in the Data Loss Prevention (DLP) component of Palo Alto Networks Prisma Access A
DLP policy enforcement bypass in Palo Alto Networks Prisma Access Agent on Windows allows a low-privileged local user to
Improper certificate validation in the Palo Alto Networks Prisma Access Agent for iOS exposes VPN tunnel traffic to inte
Anti-tamper protection bypass in Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to gain
Security control bypass in Palo Alto Networks Prisma Access Agent for Linux enables a local, low-privileged attacker to
Information disclosure in the Palo Alto Networks Prisma® Access Agent on Linux allows local low-privileged users to read
Prisma Access Agent on Windows and macOS exposes sensitive configuration data and credentials to local low-privileged us
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today