Unauthenticated File Deletion Vulnerability in Palo Alto Networks PAN-OS Management Interface

CVE-2025-0109

Summary

A vulnerability exists in the management web interface of Palo Alto Networks' PAN-OS that allows an unauthenticated attacker with network access to delete specific files, including certain logs and configuration files, operating as the 'nobody' user. While system files remain unaffected, this issue poses a risk to the integrity of log maintenance and configuration management. To mitigate this risk, it is crucial to restrict access to the management web interface to only trusted internal IP addresses, aligning with best practice guidelines outlined by Palo Alto Networks. This vulnerability does not impact Cloud NGFW or Prisma Access software.

References