Prisma Access Agent EUVD-2026-42688

Exploitation requires an active local user session on a Windows endpoint with Prisma Access Agent installed and DLP policies enforced - the CVSS PR:L metric confirms low-privilege (standard user) access is sufficient, with no administrative rights needed. The attack is entirely local; there is no network-facing component to this vulnerability (AV:L). The macOS platform is explicitly not affected, narrowing the attack surface exclusively to Windows-managed devices. No user interaction beyond the attacker's own session is required (UI:N). There is no indication that any non-default configuration is required - any Windows endpoint with the agent installed and DLP policy applied appears to fall within scope. Limiting factors: requires physical or remote interactive session on the target Windows endpoint; macOS endpoints are immune; and no publicly available exploit code exists at time of analysis.

The CVSS 4.0 base score of 5.8 (Medium) reflects the local attack vector (AV:L) and low-privilege requirement (PR:L), which meaningfully constrain exploitability to insiders or attackers already with a foothold on the endpoint. However, the impact metrics VC:H and VI:H indicate that successful exploitation fully compromises confidentiality and integrity of data on the vulnerable system - a DLP bypass by definition allows sensitive data to leave controlled channels undetected. The CVSS supplemental vector confirms E:U (unexploited), and there is no CISA KEV listing, meaning no active exploitation has been confirmed. The U:Amber urgency designation suggests the vendor considers remediation a near-term priority without treating it as an emergency. No EPSS score was provided. The combination of a medium base score with high-impact metrics is characteristic of locally-constrained vulnerabilities where the damage, once exploited, is significant but the attack surface is limited to endpoint users. Defenders should weight insider threat scenarios and already-compromised endpoints as the primary concern.

A local standard user on a managed Windows endpoint running Prisma Access Agent identifies weaknesses in how DLP enforcement mechanisms validate or intercept data transfer operations, then triggers one or more of the protection mechanism failures to cause DLP policy to be bypassed - allowing sensitive files or clipboard content to be exfiltrated via channels the policy would otherwise block. No public proof-of-concept exploit code has been identified, meaning exploitation currently requires specific knowledge of the implementation weaknesses.