Privilege Escalation in Palo Alto Networks Prisma Access Agent for Windows and macOS
CVE-2026-0294

6MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Prisma Access Agent
Vendor
CVE Published:
13 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-0294?

A privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent allows local users on Windows and macOS to execute arbitrary code with elevated privileges. This can potentially lead to unauthorized access and control over the affected systems. Other platforms such as Linux, iOS, Android, and ChromeOS remain unaffected by this issue.

Affected Version(s)

Prisma Access Agent Windows 0 < 26.3

Prisma Access Agent Linux All

References

https://security.paloaltonetworks.com/CVE-2026-0294
vendor-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Garrison of State Farm Information Security
KBTG Cybersecurity Researcher Engineers: Nuttakorn Tungpoonsup, Jirawat Siengphao, Khanatip Vanjongkham, and Waris Damkham
.