This vulnerability involves multiple information disclosure issues in the Prisma Access Agent from Palo Alto Networks. It enables a local attacker with low privileges to access sensitive configuration data and credentials stored by the agent. The flaw does not affect Prisma Access Agent versions on Linux, ChromeOS, Android, or iOS platforms. The CVSS 4.0 vector indicates local attack vector, low complexity, no user interaction, and high confidentiality impact. No official remediation or patch has been announced as of the published date.

An attacker with local access to the affected Prisma Access Agent can obtain sensitive configuration data and credentials, potentially compromising the security of the affected system or network. The confidentiality impact is high, but there is no indication of integrity or availability impact. The vulnerability does not appear to be exploitable remotely and requires local privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to systems running the affected Prisma Access Agent versions and monitor for unauthorized local activity. No vendor advisory or patch links are currently available.