This vulnerability (CVE-2026-0289) in Palo Alto Networks Prisma Browser involves insufficient protection of credentials within the Account Protection feature, enabling a security bypass. The CVSS 4.0 base score is 0.5, reflecting low impact with local attack vector and partial remediation effort. No vendor advisory or patch information is available, and the vulnerability is not related to cloud services. The weakness corresponds to CWE-522, which concerns insufficiently protected credentials that could allow unauthorized access or bypass of security controls.

The impact is limited to a security bypass of the Account Protection feature, potentially allowing unauthorized users to circumvent intended security controls. The low CVSS score and absence of known exploits indicate minimal immediate risk. There is no indication of data loss, privilege escalation, or denial of service from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor Palo Alto Networks advisories for updates. No specific mitigation steps are provided by the vendor at this time.