A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized… (CVE-2026-0311)

This vulnerability involves a server-side request forgery flaw in Palo Alto Networks Checkov by Prisma® Cloud. An unauthenticated local user can exploit this issue to induce the host to send unauthorized network requests to internal services. The CVSS 4.0 vector indicates low attack complexity and privileges required, with user interaction needed and limited impact scope. No patch or remediation details are provided in the source data.

An attacker with local access but no authentication can leverage this SSRF vulnerability to make unauthorized network requests from the host to internal services. This could potentially expose internal network resources or services to unauthorized access. The severity is rated low, indicating limited impact or exploitability based on current information. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor Palo Alto Networks advisories for updates. Until a fix is available, restrict local access to trusted users and consider network segmentation to limit internal service exposure.