Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-0306

Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • 0 to < 26.2affected

Palo Alto Networks Prisma Access Agent

Default version status: unaffected

  • All to < 6.3.3-h15unaffected

References