This vulnerability (CVE-2026-0292) affects the Windows version of the Palo Alto Networks Prisma Access Agent. It involves an authentication bypass in the network driver that permits a local administrator to circumvent security inspection mechanisms. This bypass enables the attacker to inject and intercept arbitrary network traffic. The issue is specific to the Windows platform; other supported platforms are not impacted. The CVSS 4.0 base score is 2.1, reflecting low severity due to the requirement of local administrator privileges and limited impact scope.

A local administrator on a Windows system running the Prisma Access Agent can bypass security inspection controls, allowing them to inject and intercept arbitrary network traffic. This could undermine network security monitoring and controls enforced by the agent. However, the impact is limited by the prerequisite of local administrator privileges and the vulnerability does not affect other operating systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published at this time. Users should monitor Palo Alto Networks advisories for updates and apply any forthcoming patches promptly.