An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive… (CVE-2026-0305)
An information disclosure vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux that allows a local user to access sensitive configuration data and credentials. This vulnerability does not affect Prisma Access Agent on macOS, Windows, iOS, Android, or Chrome OS. The issue is classified under CWE-200 (Exposure of Sensitive Information).
AI Analysis
Technical Summary
CVE-2026-0305 describes an information disclosure vulnerability in the Prisma Access Agent on Linux. A local user with access to the system can exploit this flaw to obtain sensitive configuration data and credentials. Other platform versions of the Prisma Access Agent are not impacted. The vulnerability is rated as medium severity with a CVSS 4.0 vector indicating local attack vector, low attack complexity, no user interaction, and high impact on confidentiality.
Potential Impact
A local attacker on a Linux system running the Prisma Access Agent can gain unauthorized access to sensitive configuration data and credentials, potentially compromising the confidentiality of the system. There is no indication of impact on integrity or availability. No known exploits are reported in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive… (CVE-2026-0305)
Description
An information disclosure vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux that allows a local user to access sensitive configuration data and credentials. This vulnerability does not affect Prisma Access Agent on macOS, Windows, iOS, Android, or Chrome OS. The issue is classified under CWE-200 (Exposure of Sensitive Information).
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-0305 describes an information disclosure vulnerability in the Prisma Access Agent on Linux. A local user with access to the system can exploit this flaw to obtain sensitive configuration data and credentials. Other platform versions of the Prisma Access Agent are not impacted. The vulnerability is rated as medium severity with a CVSS 4.0 vector indicating local attack vector, low attack complexity, no user interaction, and high impact on confidentiality.
Potential Impact
A local attacker on a Linux system running the Prisma Access Agent can gain unauthorized access to sensitive configuration data and credentials, potentially compromising the confidentiality of the system. There is no indication of impact on integrity or availability. No known exploits are reported in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3fx5-jxpv-45qf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-0305"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6aa2af85acd9273b4925b435
Added to database: 09/10/2026, 13:24:21 UTC
Last enriched: 09/10/2026, 13:36:57 UTC
Last updated: 09/10/2026, 17:00:35 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.