This vulnerability (CVE-2026-0278) affects the Prisma Access Agent version 24.0 on Windows platforms. It is characterized by multiple failures in protection mechanisms within the DLP component, enabling a local user with limited privileges to bypass DLP policy enforcement. The issue is classified under CWE-693 (Protection Mechanism Failure). There is no indication of known exploits in the wild or an available patch or official fix at this time. The macOS Prisma Access Agent is not impacted by this vulnerability.

A local attacker with limited privileges on a Windows system running Prisma Access Agent 24.0 can bypass Data Loss Prevention policies, potentially allowing unauthorized data exfiltration or policy circumvention. This undermines the effectiveness of DLP controls, which are critical for preventing sensitive data leaks. There is no reported impact on availability or integrity beyond the bypass of DLP enforcement. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, organizations should monitor Palo Alto Networks advisories for updates. Until a patch is available, consider restricting local user privileges and limiting access to systems running the affected version to trusted personnel only.