Prisma Access Agent EUVD-2026-57707

Exploitation requires the attacker to possess local administrator privileges on the target Windows endpoint - confirmed by CVSS 4.0 PR:H and AV:L. This is a hard gating condition: the bypass cannot be triggered remotely (AV:L) and cannot be triggered by a standard user account. The vulnerability applies solely to the Windows platform; the agent on Linux, macOS, iOS, Android, and Chrome OS is not affected per the vendor description. No non-default configuration, network-accessible service, or specific feature flag is required beyond having the Prisma Access Agent installed and running on Windows. What limits exploitation: (1) physical or RDP-level local access is required, (2) administrator-level credentials must be obtained beforehand through a separate attack vector, and (3) the tamper bypass grants access to agent internals only - it does not itself constitute a privilege escalation from user to admin.

The CVSS 4.0 score of 5.6 (Medium) accurately reflects a constrained risk profile. The vector AV:L/PR:H establishes that exploitation demands local administrator privileges - an attacker who has already achieved significant foothold. Vulnerable system Confidentiality (VC:H) and Integrity (VI:H) are high, meaning once the bypass succeeds, the attacker can fully read and tamper with protected agent processes and files; however, Availability (VA:N) and all subsequent-system impacts (SC:N/SI:N/SA:N) are nil. The E:U (Unreported) exploitation status in the supplemental vector confirms no active exploitation documented at time of analysis, and no CISA KEV listing exists. The practical threat model centers on: an insider adversary with admin credentials attempting to blind the Prisma Access security stack, or a post-compromise attacker who has already escalated privileges and wants to disable endpoint telemetry before lateral movement. For organizations relying on Prisma Access Agent tamper protection as a compensating control against rogue admins, this is meaningful; for general patch prioritization, the PR:H prerequisite significantly limits urgency relative to remote unauthenticated vulnerabilities.

An attacker who has gained local administrator access on a corporate Windows endpoint - via credential harvesting, a separate privilege escalation vulnerability, or insider abuse - invokes the anti-tamper bypass to access and modify Prisma Access Agent's protected process space. With the agent's tamper defenses neutralized, the attacker can disable security enforcement and telemetry reporting, effectively blinding the Prisma Access control plane to subsequent malicious activity on that endpoint. No public exploit code has been identified at time of analysis, so exploitation currently requires custom tooling developed with knowledge of the bypass mechanism.