Insufficient Input Validation Vulnerability in Palo Alto Networks Prisma® Browser
CVE-2025-4616

1.1LOW

Key Information:

Vendor

Palo Alto Networks
Status
Prisma Browser
Vendor
CVE Published:
14 November 2025

Badges

👾 Exploit Exists

What is CVE-2025-4616?

A vulnerability in Palo Alto Networks Prisma® Browser permits locally authenticated non-administrative users to bypass crucial security controls due to inadequate validation of untrusted input. This allows potential manipulation of the browser’s security mechanisms, raising concerns over user data protection and overall system integrity.

Affected Version(s)

Prisma Browser 142.15.6.0 <= 142.15.6.60

References

https://security.paloaltonetworks.com/CVE-2025-4616
vendor-advisory

CVSS V4

Score:
1.1
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.
JSON
.
CVE-2025-4616 : Insufficient Input Validation Vulnerability in Palo Alto Networks Prisma® Browser