CVE-2026-0303
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
Exploited
Not listed
EPSS
0.002
7.7th percentile
Discovered by
Third party
Vendor-published field
Published
Sep 10, 2026
Assigned by palo_alto
Description
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Weakness: CWE-829
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Cloud | Cloud Security | cna-assigner |
Vendor-reported products (1)
- Palo Alto Networks · Checkov by Prisma Cloud
Credit
Michael Adedeji
Vendor remediation
Version Minor Version Suggested Solution Checkov by Prisma Cloud 3.2 3.2.0 through 3.2.531 Upgrade to 3.2.532or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.