This vulnerability in Palo Alto Networks Checkov by Prisma® Cloud (CVE-2026-0303) enables arbitrary code execution if Checkov scans a directory that includes a malicious configuration file controlled by an attacker. The flaw is categorized under CWE-829 and has a low severity rating. Exploitation requires local access and user interaction, with no known exploits reported. No patch or remediation details are currently available, and the product is not a cloud service, so remediation is the responsibility of the user or vendor.

Successful exploitation could allow an attacker to execute arbitrary code on the system running Checkov, potentially compromising the integrity of the scanning environment. However, the low severity and requirement for local access and user interaction limit the risk. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Palo Alto Networks advisories for updates. Until a fix is available, avoid scanning directories with untrusted or attacker-controlled configuration files.