CVE-2026-0294 - Prisma Access Agent: Local Privilege Escalation

Back Back to CVE browser

MEDIUM

Prisma Access Agent: Local Privilege Escalation

Published Aug 13, 2026

6.0

MEDIUM

CVSS 4.0

EPSS 0.11%

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.

The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

Affected products

Vendor Palo Alto Networks Product Prisma Access Agent Default
unaffected
Affected
- ≥ 0, < 26.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Palo Alto Networks	Prisma Access Agent	unaffected	Affected ≥ 0, < 26.3

Remediation

Vendor solution

VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Windows 24.0 through 26.2.2 Upgrade to 26.3 or later. Prisma Access Agent on macOS 24.0 through 26.2.2 Upgrade to 26.3 or later. Prisma Access Agent on Linux No action needed. Prisma Access Agent on iOS No action needed. Prisma Access Agent on Android No action needed. Prisma Access Agent on Chrome OS No action needed.

Weaknesses (1)

CWE-427