The vulnerability identified as CVE-2026-0248 affects the Prisma Access Agent on Android and Chrome OS due to improper certificate validation (CWE-295). This weakness permits attackers to conduct man-in-the-middle attacks by using any certificate issued by a trusted Certificate Authority, thereby intercepting VPN traffic and potentially capturing sensitive information from the device. The issue does not impact Prisma Access Agent versions on macOS, Windows, Linux, or iOS. The CVSS 4.0 vector indicates the attack requires adjacent network access, no privileges or user interaction, but results in high confidentiality and integrity impacts. The vendor has not released a patch or official remediation at this time.

Successful exploitation allows an attacker to intercept VPN traffic on affected Android and Chrome OS devices running Prisma Access Agent, potentially exposing sensitive device information. This compromises confidentiality and integrity of the VPN communication. Other platforms are not impacted. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users of Prisma Access Agent on Android and Chrome OS should exercise caution when connecting to untrusted networks. Monitoring vendor communications for updates is recommended.