CVE-2026-0293 is a vulnerability affecting the Windows version of Palo Alto Networks Prisma® Access Agent. It permits a local attacker who already has administrator privileges to bypass the anti-tamper protection mechanism. This bypass potentially allows unauthorized access to processes and files that are normally protected by the agent. The vulnerability does not affect Prisma Access Agent on other platforms such as Linux, macOS, iOS, Android, or Chrome OS. No exploits are known in the wild, and no official patch or remediation has been confirmed.

The vulnerability enables a local administrator to circumvent anti-tamper protections, which could lead to unauthorized access to sensitive processes and files protected by the Prisma Access Agent on Windows. This could undermine the security controls provided by the agent, potentially allowing malicious modifications or data exposure. However, since the attacker must already have administrator privileges, the impact is limited to scenarios where such access is obtained or granted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local administrator access to trusted users only and monitor for suspicious activity involving the Prisma Access Agent on Windows systems.