Medium severity · published Sep 10, 2026
CVE-2026-0305
Prisma Access Agent: Information Disclosure Vulnerability on Linux
4.3
CVSS
0.1%
EPSS
No
On KEV
Description
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials.
The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Prisma Access Agent · Palo Alto Networks
24.0 before 26.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0305
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0305
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2026-0305
More from Prisma Access Agent
7.8
CVE-2026-0294
Prisma Access Agent: Local Privilege Escalation
7.8
CVE-2026-0278
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
7.8
CVE-2026-0271
Prisma Access Agent: Local Privilege Escalation by Authorized Users
7.8
CVE-2026-0246
Prisma Access Agent: Local Privilege Escalation Vulnerability
7.8
CVE-2026-0247
Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities