Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2025-4228

Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XDR Broker VM

Default version status: unaffected

  • 27.0.0 to < 27.0.26affected

References