Medium6.8Palo Alto Networks
Prisma Access: Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive config…
CVE-2026-0245 Published May 13, 2026Updated by vendor Jun 17, 2026
CVE-2026-0245
Affected products & platforms
Palo Alto NetworksPrisma Access
Summary
Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.
Affected versions
- Prisma Access Agent < 26.2.1
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Fixed versions
- Prisma Access Agent >= 26.2.1
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Upgrade to a fixed release: Prisma Access Agent >= 26.2.1.
Temporary workarounds
- No known workarounds exist for this issue.
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.