CVE-2026-0271 — Prisma Access Agent: Local Privilege Escalation by Authorized Users

Back Back to CVE browser

MEDIUM

Prisma Access Agent: Local Privilege Escalation by Authorized Users

Published Jun 10, 2026

5.9

MEDIUM

CVSS 4.0

EPSS 0.11%

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges.

This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Affected products

Vendor Palo Alto Networks Product Prisma Access Agent Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <26.2.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

Prisma Access Agent

unaffected

Version	Status	Constraints
0	affected	<26.2.1

Remediation

Vendor solution

VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Linux 25.7 through 26.2.0 Upgrade to 26.2.1 or later. Prisma Access Agent All on macOS No action needed. Prisma Access Agent All on Windows No action needed. Prisma Access Agent All on iOS No action needed. Prisma Access Agent All on Android No action needed. Prisma Access Agent All on Chrome OS No action needed.