Findings

CVE-2026-0245

Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials.

Published May 13, 2026 · updated Jul 14, 2026 · paloaltonetworks prisma access agent

Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 13, 2026 · NIST NVD

    Detected

    Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.

  2. Jul 14, 2026 · NIST NVD

    Updated

    Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.

Affected

  • cpe paloaltonetworks/prisma access agentversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-0245

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-0245

    Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.

    nvd.nist.gov

References

CVE-2026-0245 · ZeroDay Findings