Dashboard / CVE-2026-0291

CVE-2026-0291

LOW
INFO Priority: 0.00 BB Relevance: 27/100
Published: 2026-08-13 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: None
VI: Low
VA: Low

Description

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
paloaltonetworks prisma_access_agent < 26.2.2

References & Advisories (1)

Bug Bounty Relevance

27 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

1.1 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.15%
Raw Score 0.001480
Percentile 4.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00148
2026-10-28
0.00148

Intelligence Sources

nvd ref →

External Links