CVE-2025-4618
Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser
Severity
Medium 4.4
CVSS 4.0
Exploited
Not listed
EPSS
0.001
0.3th percentile
Discovered by
Third party
Published by the vendor
Published
Nov 14, 2025
Assigned by palo_alto
Description
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.
Weakness: CWE-316
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Browser | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Prisma Browser
Credit
Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.
Vendor remediation
Version Minor Version Suggested Solution Prisma BrowserUpgrade 142.15.6.60 to or later.