CVE-2026-0291: prisma access agent before 26.2.2 (exclusive); +1 more affected products

Affected technology

prisma access agent · before 26.2.2 (exclusive)
paloaltonetworks

Prisma Access Agent · 0 to before 26.2.2; status changes: 26.2.2 — unaffected
Palo Alto Networks

Description’s affected range: before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

A local low privileged user can delete system files in a limited scope and disable Prisma Access Agent. Vendor/CNA’s CVSS 4.0 assessment (base score 1.1/10) rates confidentiality impact as none; integrity and availability impact as low.