CVE-2026-0323: Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)

Q: Who is exposed to this issue?

Systems running Palo Alto Networks Checkov by Prisma Cloud are exposed where a local user can interact with the affected software. The vulnerability is described as exploitable by an unauthenticated local user.

Q: What access does an attacker need to exploit it?

An attacker needs local access to the host but does not need to authenticate. Exploitation also requires user interaction, according to the supplied vector.

Q: What could exploitation allow?

An attacker could cause the host to make unauthorized network requests to internal services. The supplied impact data indicates no direct impact to the vulnerable component's confidentiality or integrity, while availability impact is low and downstream system confidentiality and integrity impacts are high.

Published Nov 11, 2026

Updated

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

Affected Software

1 affected componentFixes available

Palo Alto Networks Checkov by Prisma Cloud<3.4.2, =0

3.4.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.4.2
Upgrade
Upgrade Checkov by Prisma Cloud to a version that resolves this vulnerability.
Fixed in 3.4.2
Configuration
Pass configuration explicitly via a trusted configuration file instead of allowing configuration to be auto-loaded from the scanned directory.
Checkov by Prisma Cloud configuration source = trusted configuration file
Compensating control
Until version 3.4.2 is deployed, avoid running Checkov over untrusted content.

Event History

Nov 11, 2026

Advisory Published

via Palo Alto Networks·05:00 PM

Data Sourced

via Palo Alto Networks·05:00 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems running Palo Alto Networks Checkov by Prisma Cloud are exposed where a local user can interact with the affected software. The vulnerability is described as exploitable by an unauthenticated local user.

What access does an attacker need to exploit it?

An attacker needs local access to the host but does not need to authenticate. Exploitation also requires user interaction, according to the supplied vector.

What could exploitation allow?

An attacker could cause the host to make unauthorized network requests to internal services. The supplied impact data indicates no direct impact to the vulnerable component's confidentiality or integrity, while availability impact is low and downstream system confidentiality and integrity impacts are high.

CVE-2026-0323: Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need to exploit it?

What could exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need to exploit it?

What could exploitation allow?