This vulnerability (CVE-2026-0247) affects the Prisma Access Agent by Palo Alto Networks, specifically its Endpoint DLP component. It consists of multiple authorization bypass flaws (CWE-306) that permit a local attacker with limited privileges to circumvent authentication mechanisms and execute privileged functions. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability is published and assigned but lacks an official remediation level or patch information. The affected version is listed as '0', which likely indicates the initial or unspecified version.

An attacker with local access and limited privileges can bypass authentication controls in the Endpoint DLP component, potentially leading to unauthorized privileged operations. This could compromise confidentiality, integrity, and availability of the affected system components. However, there are no known exploits in the wild, and the vulnerability requires local access and some privileges, limiting remote exploitation risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, organizations should monitor Palo Alto Networks advisories for updates. In the meantime, restrict local access to trusted users only and apply principle of least privilege to limit potential exploitation.