CVE-2026-0271

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Palo Alto Prisma Access Agent for Linux

Publication date: 2026-06-10

Last updated on: 2026-06-10

Assigner: Palo Alto Networks, Inc.

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-10

Last Modified

2026-06-10

Generated

2026-07-01

AI Q&A

2026-06-11

EPSS Evaluated

2026-06-30

NVD

CVE-2026-0271

EUVD

EUVD-2026-36147

Affected Vendors & Products

Vendor	Product	Version / Range
palo_alto_networks	prisma_access_agent	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to upgrade the Palo Alto Networks Prisma Access Agent on Linux devices to version 26.2.1 or later.

No workarounds are available, and no action is needed for Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Executive Summary

This vulnerability is a privilege escalation issue in the Palo Alto Networks Prisma Access Agent application on Linux devices. It allows a local user to execute code with elevated privileges, meaning the user can gain higher-level access than normally permitted.

It specifically affects the Linux version of the Prisma Access Agent and does not impact versions on Windows, macOS, iOS, Android, or ChromeOS.

Impact Analysis

This vulnerability can allow a local user on a Linux device running the Prisma Access Agent to gain elevated privileges. This means the user could execute code with higher permissions than intended, potentially leading to unauthorized actions such as modifying system files, installing malicious software, or accessing sensitive information.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-0271. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70