This vulnerability (CVE-2026-0270) in Palo Alto Networks Cortex XSOAR 8.13 involves improper limitation of a pathname to a restricted directory (CWE-22). An attacker positioned on an adjacent network and capable of intercepting and manipulating network response traffic via a man-in-the-middle attack can exploit this flaw to write arbitrary files on the host system running the vulnerable software. The CVSS 4.8 score reflects medium severity, with attack vector requiring adjacent network access and high complexity. No official fix or patch has been published as of the data provided.

Successful exploitation allows an unauthenticated attacker with adjacent network access and man-in-the-middle capabilities to write arbitrary files on the host system running Cortex XSOAR 8.13. This could lead to unauthorized modification of system files or code execution depending on the files written. The medium CVSS score reflects moderate impact with significant attack complexity and required conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider limiting network exposure of Cortex XSOAR 8.13 instances to trusted networks only and monitor for suspicious network activity indicative of man-in-the-middle attacks.