This vulnerability in Palo Alto Networks Prisma Browser arises from a race condition that permits a locally authenticated user without administrative privileges to circumvent specific access and data control policies. The issue is due to improper checking of unusual or exceptional conditions (CWE-754). The CVSS 4.0 base score is 5.8, reflecting a medium severity with local attack vector, low attack complexity, and partial impact on confidentiality and integrity. No vendor advisory or patch information is currently available, and the product is not a cloud service.

The vulnerability enables a locally authenticated non-admin user to bypass certain access and data control policies, potentially leading to unauthorized access or data exposure within the Prisma Browser environment. The impact is limited by the requirement for local authentication and the absence of administrative privileges, but it still poses a risk to policy enforcement integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Palo Alto Networks advisories for updates. In the meantime, restrict local access to trusted users only and consider additional access controls to mitigate risk.