CVE-2026-0294: Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.
The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.3 - Upgrade
Upgrade
Palo Alto Networks Prisma Access Agent (Windows)to a version that resolves this vulnerability.Fixed in 26.3 - Upgrade
Upgrade
Palo Alto Networks Prisma Access Agent (macOS)to a version that resolves this vulnerability.Fixed in 26.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0294?
The severity of CVE-2026-0294 is high with a score of 8.5.
What types of devices are affected by CVE-2026-0294?
CVE-2026-0294 affects the Palo Alto Networks Prisma Access Agent on Windows and macOS devices.
How do I fix CVE-2026-0294?
To fix CVE-2026-0294, ensure you update the Prisma Access Agent to the latest version provided by Palo Alto Networks.
What type of vulnerability is CVE-2026-0294?
CVE-2026-0294 is a local privilege escalation vulnerability that allows a local user to execute code with elevated privileges.
Is any other operating system affected by CVE-2026-0294?
No, other operating systems such as Linux, iOS, Android, and ChromeOS are not affected by CVE-2026-0294.