CVE-2026-0240 is a CWE-497 classified vulnerability in Palo Alto Networks Trust Protection Foundation that permits an authenticated attacker to disclose sensitive system information stored in the server's vault. This exposure allows the attacker to impersonate any user and make arbitrary configuration changes within the affected environment. The vulnerability affects versions 24.1.0, 24.3.0, 25.1.0, and 25.3.0. The CVSS 4.5 score reflects medium severity with low attack complexity and privileges required, but high impact on confidentiality and integrity. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

Successful exploitation leads to unauthorized disclosure of sensitive system information, enabling attacker impersonation of any user and arbitrary modification of configuration settings. This compromises both confidentiality and integrity of the affected system. The medium CVSS score reflects a moderate risk level given the potential for privilege escalation and configuration tampering.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been provided, organizations should monitor Palo Alto Networks advisories closely for updates. Until a patch is available, restrict authenticated access to the Trust Protection Foundation to trusted personnel only and apply least privilege principles to limit potential exploitation.