This vulnerability (CVE-2026-0272) involves missing authorization controls in Palo Alto Networks PAN-OS software, enabling an authenticated administrator with CLI access to escalate privileges to root level. It affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). The vulnerability does not impact Cloud NGFW or Prisma Access. The issue is mitigated by restricting CLI and management interface access according to Palo Alto Networks' best practice guidelines. No official patch or remediation level has been published yet.

An authenticated administrator with CLI access can perform unauthorized actions with root privileges, potentially leading to full control over the affected device. The impact is significant if CLI access is not properly restricted. However, the risk is mitigated when access controls are properly implemented as recommended by the vendor.

No official patch or remediation has been published yet. Palo Alto Networks recommends restricting CLI access to a limited group of administrators and limiting management interface access to trusted internal IP addresses following their best practice deployment guidelines. Organizations should review and enforce these access controls to minimize risk until an official fix is available.