This vulnerability involves an authentication bypass in the network driver component of the Prisma Access Agent on Windows, enabling a local administrator to circumvent security inspection mechanisms. This bypass can lead to the injection and interception of arbitrary network traffic by the attacker. The flaw does not affect Prisma Access Agent versions on other platforms such as Linux, macOS, iOS, Android, or Chrome OS. The CVSS 4.0 vector indicates a local attack vector with low complexity and no user interaction required, but limited impact due to the prerequisite of local administrator privileges. No patch or remediation details are currently provided.

A local administrator on a Windows system running Prisma Access Agent can bypass security inspection controls, potentially allowing manipulation and interception of network traffic. This could undermine network security monitoring and enforcement on the affected host. However, the impact is limited by the requirement for local administrator access, reducing the risk from remote attackers. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local administrator access to trusted personnel only and monitor for suspicious activity related to network driver manipulation. Follow Palo Alto Networks advisories for updates on patches or mitigations.