Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2026-0268

Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

Description

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • 0 to < 26.2.1affected

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • Allunaffected

References