CVE-2026-0306
Awaiting Analysis Awaiting Analysis - Queue

DLP Policy Bypass in Prisma Access Agent

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: Palo Alto Networks, Inc.

Description
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-10-01
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-29
NVD
CVE-2026-0306
EUVD
EUVD-2026-75258

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
palo_alto_networks prisma_access_agent to 26.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma Access Agent on Windows systems. It allows a local user to bypass configured DLP policy controls and exfiltrate sensitive data. The issue does not affect macOS, Linux, iOS, Android, or Chrome OS versions of the agent.

Detection Guidance

Check the installed version of Prisma Access Agent on Windows systems. If the version is below 26.2, the system is vulnerable. Use commands like 'wmic product get name,version' or check the agent's interface for version details.

Impact Analysis

If you use Prisma Access Agent on Windows versions below 26.2, a local attacker could bypass DLP policies to steal sensitive data. Upgrading to version 26.2 or later prevents this issue. No known exploits exist currently.

Compliance Impact

This vulnerability could lead to unauthorized data exfiltration, potentially violating GDPR, HIPAA, or other regulations requiring data protection controls. Organizations must ensure affected systems are updated to mitigate compliance risks.

Mitigation Strategies

Upgrade the Prisma Access Agent to version 26.2 or later on all affected Windows systems. No workarounds are available, so upgrading is the only mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0306. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart