Skip to content
CVE PROGRAM SOURCE RECORD1.1 Low

CVE-2026-0291

Prisma Access Agent: Authenticated Limited File Deletion on Linux

Description

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • 0 to < 26.2.2affected

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • Allunaffected

References