This vulnerability (CVE-2026-0235) in Palo Alto Networks Prisma Browser is classified under CWE-754, indicating an improper check for unusual or exceptional conditions. It manifests as a race condition that enables a locally authenticated user without administrative privileges to bypass access and data control policies. The CVSS 4.0 vector indicates the attack requires local access with low complexity and partial privileges, no user interaction, and results in unauthorized read access with medium impact on confidentiality and low impact on integrity and availability. No patch or official remediation level has been provided by the vendor as of the published date.

The vulnerability allows a locally authenticated non-admin user to bypass certain access and data control policies, potentially exposing sensitive information or allowing unauthorized data access. The impact is rated medium severity with a CVSS score of 5.8, primarily affecting confidentiality. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Palo Alto Networks vendor advisory for current remediation guidance. Since no official fix or mitigation level is provided, users should monitor vendor communications for updates. Until a patch is available, restrict local user access to trusted personnel only and apply principle of least privilege to limit potential exploitation.