Command Injection Vulnerability in Palo Alto Networks PAN-OS Software

CVE-2025-4230

What is CVE-2025-4230?

A command injection issue in Palo Alto Networks PAN-OS software allows an authenticated administrator to bypass crucial system restrictions, enabling them to execute arbitrary commands with root privileges. This vulnerability requires that an administrator has access to the PAN-OS command line interface (CLI). To mitigate the risks associated with this flaw, it is essential to limit CLI access to a small, trusted group of administrators. Notably, services such as Cloud NGFW and Prisma Access are unaffected by this vulnerability.

References