This vulnerability (CVE-2026-0237) in Palo Alto Networks Prisma Browser on macOS arises from improper protection of an alternate path to an internal automation bridge. A locally authenticated user without administrative privileges can exploit this exposed communication channel to send unauthorized commands to the browser, bypassing intended security restrictions. The CVSS 4.0 vector indicates local attack vector with low complexity, partial privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-424 (Improper Protection of Alternate Path). No patch or official remediation level has been published by the vendor as of the current data.

The vulnerability allows a locally authenticated non-admin user to bypass security controls by sending unauthorized commands to the Prisma Browser via an exposed internal automation bridge. This can lead to unauthorized actions within the browser, potentially compromising confidentiality, integrity, and availability of browser operations and data. The CVSS score of 7.3 reflects a high impact on the affected system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the Palo Alto Networks vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for unusual local activity. No official mitigation or temporary fix has been provided by the vendor at this time.