Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-0237

Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Prisma Browser

Default version status: unaffected

  • 0 to < 146.16.6.165affected

References