EUVD-2026-57707
GHSA-m2c3-xjg5-x7hm
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:M/U:Amber
Local-only attack vector and mandatory pre-existing admin privileges (PR:H); full confidentiality and integrity impact on agent internals with no availability or scope change.
Primary rating from Vendor (palo_alto).
CVSS VectorVendor: palo_alto
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.
The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
AnalysisAI
Anti-tamper protection bypass in Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to gain unauthorized access to the agent's protected processes and files, effectively disabling endpoint security enforcement. Only the Windows platform is affected - Linux, macOS, iOS, Android, and Chrome OS deployments are explicitly not impacted. No public exploit code has been identified and no active exploitation has been confirmed (CVSS E:U), keeping real-world risk constrained to insider threat and post-compromise scenarios.
Technical ContextAI
Palo Alto Networks Prisma Access Agent is a Windows endpoint component of the Prisma SASE (Secure Access Service Edge) platform that enforces Zero Trust network access and provides telemetry to the Prisma cloud. The vulnerability is rooted in CWE-693 (Protection Mechanism Failure), meaning the anti-tamper control - typically implemented via Windows Protected Process Light (PPL), kernel callbacks, or similar OS-enforced shielding - fails to resist manipulation by a local administrator account. The CPE string cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:*:*:* covers all versions without a bounded range, indicating the affected scope spans the agent's full release history on Windows until the patched release. Tags referencing Microsoft alongside Apple and Google reflect the cross-platform agent family, with the flaw isolated to the Windows implementation.
RemediationAI
Apply the patched version of Palo Alto Networks Prisma Access Agent for Windows as soon as it is available; consult the vendor advisory at https://security.paloaltonetworks.com/CVE-2026-0293 for the exact fixed version, which is not independently confirmed from currently available data. As a compensating control where immediate patching is not feasible, enforce the principle of least privilege by auditing and minimizing the number of accounts with local administrator rights on Windows endpoints running Prisma Access Agent - since exploitation is gated on PR:H, reducing admin account exposure directly narrows the attack surface. Deploy endpoint detection and response (EDR) rules to alert on processes attempting to open handles to Prisma Access Agent protected processes with elevated access rights. Note that restricting local admin access may affect legitimate IT management workflows and should be coordinated with endpoint operations teams before enforcement.
More in Prisma Access Agent
View allImproper certificate validation in Palo Alto Networks Prisma Access Agent versions below 26.2.1 on Android and Chrome OS
Privilege escalation via an uncontrolled search path (CWE-427) in Palo Alto Networks Prisma Access Agent on Windows and
Privilege escalation in Palo Alto Networks Prisma Access Agent on Linux allows a locally authenticated low-privileged us
Authorization bypass in Palo Alto Networks Prisma Access Agent's Endpoint DLP component permits a locally authenticated
Local privilege escalation in Palo Alto Networks Prisma Access Agent (all versions prior to 26.2.1) allows any locally a
Multiple protection mechanism failures in the Data Loss Prevention (DLP) component of Palo Alto Networks Prisma Access A
DLP policy enforcement bypass in Palo Alto Networks Prisma Access Agent on Windows allows a low-privileged local user to
Improper certificate validation in the Palo Alto Networks Prisma Access Agent for iOS exposes VPN tunnel traffic to inte
Security control bypass in Palo Alto Networks Prisma Access Agent for Linux enables a local, low-privileged attacker to
Information disclosure in the Palo Alto Networks Prisma® Access Agent on Linux allows local low-privileged users to read
Prisma Access Agent on Windows and macOS exposes sensitive configuration data and credentials to local low-privileged us
Authentication bypass in the Windows network driver of Palo Alto Networks Prisma Access Agent allows a local administrat
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today