CVE-2026-0306 - Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows

Back Back to CVE browser

MEDIUM

Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows

Published Sep 10, 2026

5.8

MEDIUM

CVSS 4.0

EPSS 0.10%

Description

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data.

This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

Affected products

Vendor Palo Alto Networks Product Prisma Access Agent Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <26.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

Prisma Access Agent

unaffected

Version	Status	Constraints
0	affected	<26.2

Remediation

Vendor solution

VersionMinor VersionSuggested SolutionPrisma Access Agent on Windows24.0 through 26.2 Upgrade to 26.2 or later.Prisma Access Agent on Linux No action needed.Prisma Access Agent on macOS No action needed.Prisma Access Agent on iOS No action needed. Prisma Access Agent on Android No action needed. Prisma Access Agent on ChromeOS No action needed.

Weaknesses (1)

CWE-693