CVE-2026-0248
Prisma Access Agent: Improper Certificate Validation Vulnerability
Description
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.
Weakness: CWE-295
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (2)
- Palo Alto Networks · Prisma Access Agent
- Palo Alto Networks · Prisma Access Agent
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.
Vendor remediation
Version Minor Version Suggested Solution Prisma Access Agent on Android 25.0 through 26.2 Upgrade to 26.2.1 or later. Prisma Access Agent Chrome OS 25.0 through 26.2 Upgrade to 26.2.1 or later. Prisma Access Agent on iOS No action needed Prisma Access Agent on Linux No action needed Prisma Access Agent on macOS No action needed Prisma Access Agent on Windows No action needed