CVE-2026-0311: Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.2.533 - Upgrade
Upgrade
Checkov by Prisma Cloudto a version that resolves this vulnerability.Fixed in 3.2.533 - Configuration
Pass configuration explicitly via a trusted configuration file instead of allowing configuration to be auto-loaded from the scanned directory.
Checkov by Prisma Cloud configuration source = trusted configuration file - Compensating control
Until a fixed version is deployed, avoid running Checkov over untrusted content.
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue is exploitable by a local, unauthenticated user. Exploitation requires user interaction, and the available data does not identify any required privileges.
What is the potential impact of successful exploitation?
An attacker could cause Checkov to make unauthorized network requests from the host to internal services. The provided metrics indicate no direct impact to the vulnerable component's confidentiality or integrity, while availability impact is low and subsequent system confidentiality and integrity impacts are low.
Is there a documented mitigation if patching cannot be performed immediately?
No workaround or mitigation is provided in the available data. The vendor security advisory is referenced, but no remediation details are included here.