CVE-2026-0271
Prisma Access Agent: Local Privilege Escalation by Authorized Users
Description
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.
Weakness: CWE-732
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (2)
- Palo Alto Networks · Prisma Access Agent
- Palo Alto Networks · Prisma Access Agent
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.
Vendor remediation
VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Linux 25.7 through 26.2.0 Upgrade to 26.2.1 or later. Prisma Access Agent All on macOS No action needed. Prisma Access Agent All on Windows No action needed. Prisma Access Agent All on iOS No action needed. Prisma Access Agent All on Android No action needed. Prisma Access Agent All on Chrome OS No action needed.