Prisma Access Agent EUVD-2026-57706

Exploitation requires local administrator privileges on a Windows system running the Palo Alto Networks Prisma Access Agent - confirmed by AV:L (local attack vector) and PR:H (high privileges required) in the CVSS 4.0 vector. The vulnerability is specific to the Windows platform; the agent on Linux, macOS, iOS, Android, and Chrome OS is not affected. No network reachability is required, and no user interaction beyond the administrator's own actions is needed (UI:N). The key limiting factor is the PR:H requirement: an attacker or insider must already control a local administrator account on the target endpoint, meaning the vulnerability is not exploitable remotely or by unprivileged users. Default Windows configurations that restrict local administrator access would further constrain the exploitable population.

The CVSS 4.0 base score of 2.1 reflects the high privilege requirement (PR:H) and local-only attack vector (AV:L), producing a low exploitability score despite meaningful subsequent-system impact (SC:H/SI:H). The exploitation status is E:U (unexploited) per the CVSS supplemental data, and this CVE is not listed in the CISA KEV catalog. No public exploit code has been identified. In practice, the attacker must already hold local administrator rights on the Windows endpoint running the agent - an already highly privileged position that limits the marginal damage compared to a network-reachable flaw. That said, the subsequent-system scope change is the meaningful risk signal here: a local admin who should be constrained by security inspection policy can instead bypass it entirely to inject or intercept traffic, undermining the zero-trust enforcement model the product is designed to provide. This is a policy-bypass impact rather than a confidentiality/availability impact on the local system itself, which explains why VC:N but SC:H/SI:H. Organizations using Prisma Access Agent as a compensating control to restrict what local admins can do on the network should treat this as a meaningful trust-boundary violation, even though the raw CVSS score is low. No EPSS score was provided in the input data.

A local administrator on a Windows endpoint running Prisma Access Agent exploits the network driver authentication bypass to disable or circumvent security inspection, then injects crafted packets or intercepts sensitive traffic that would otherwise be blocked or logged by the agent's policy enforcement. Because exploitation requires an already-privileged local account, the most realistic scenario involves an insider threat, a compromised admin credential, or a post-exploitation pivot where an attacker has already achieved administrator-level access and wants to evade detection by disabling the inspection layer.