CVE-2026-0312: Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.3.25 - Upgrade
Upgrade
Checkov by Prisma Cloudto a version that resolves this vulnerability.Fixed in 3.3.25 - Compensating control
Until the fixed version is deployed, avoid running Checkov over untrusted content and pass configuration explicitly via a trusted configuration file instead of allowing configuration to be auto-loaded from the scanned directory.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems where an unauthenticated local user can interact with Checkov are exposed. The impact is limited to writing files on the scanning filesystem.
What access does an attacker need?
An attacker needs local access to the system running the scan. No authentication is required, but user interaction is required according to the supplied vector.
What is the likely impact of successful exploitation?
Successful exploitation allows arbitrary file writes to locations on the scanning filesystem. The provided impact information indicates integrity impact on the vulnerable component, with no stated confidentiality or availability impact.