DLP Policy Bypass Vulnerability in Palo Alto Networks Prisma Access Agent
CVE-2026-0306

5.8MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Prisma Access Agent
Vendor
CVE Published:
10 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-0306?

A vulnerability in the Data Loss Prevention (DLP) enforcement mechanism of Palo Alto Networks' Prisma Access Agent allows local users to bypass established DLP policy controls. This security issue can potentially lead to the unauthorized exfiltration of sensitive data, posing a significant threat to organizational data integrity.

Affected Version(s)

Prisma Access Agent Windows 0 < 26.2

Prisma Access Agent Linux All

References

https://security.paloaltonetworks.com/CVE-2026-0306
vendor-advisory

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vladislav Ovitchinikov and Daniel Cuthbert
.