CVE-2026-0292: Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic.
The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.3 - Upgrade
Upgrade
Palo Alto Networks Prisma Access Agent (Windows network driver)to a version that resolves this vulnerability.Fixed in 26.3 or later
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0292?
CVE-2026-0292 has a severity rating of medium at 6.1.
How do I fix CVE-2026-0292?
To fix CVE-2026-0292, ensure you update the Palo Alto Networks Prisma Access Agent to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-0292?
CVE-2026-0292 is an authentication bypass vulnerability in the network driver of the Prisma Access Agent.
Who is affected by CVE-2026-0292?
CVE-2026-0292 affects local administrators of Windows systems running the Palo Alto Networks Prisma Access Agent.
What can attackers do with CVE-2026-0292?
Attackers can inject and intercept arbitrary network traffic by bypassing security inspection due to CVE-2026-0292.