CVE-2026-0305: Prisma Access Agent Information Disclosure

CVE-2026-0305 Overview

CVE-2026-0305 is an information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux. A local user with low-level privileges can read sensitive configuration data and credentials stored by the agent. The flaw is tracked under CWE-200: Exposure of Sensitive Information to an Unauthorized Actor.

Palo Alto Networks confirms the Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected. Exposed credentials can enable follow-on access to Prisma Access resources protected by the agent.

Critical Impact
A local, authenticated user on an affected Linux endpoint can retrieve Prisma Access Agent configuration data and credentials, enabling lateral access to protected corporate resources.

Affected Products

Palo Alto Networks Prisma Access Agent on Linux
Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS are not affected
Refer to the Palo Alto Networks security advisory for specific fixed versions

Discovery Timeline

2026-09-10 - CVE-2026-0305 published to the National Vulnerability Database (NVD)
2026-09-10 - Last updated in NVD database

Technical Details for CVE-2026-0305

Vulnerability Analysis

The Prisma Access Agent on Linux stores configuration data and credentials in a location or with permissions that allow a local, authenticated user to read them. The issue is scoped to confidentiality only. It does not permit modification of agent state or disruption of service.

Exploitation requires local access with low privileges on the Linux host running the agent. No user interaction is required, and attack complexity is low. Because the agent brokers access to Prisma Access cloud-delivered security services, disclosed credentials can be reused outside the compromised host.

The root vulnerability class is information exposure, categorized as [CWE-200]. Other Prisma Access Agent platforms are unaffected, which suggests a Linux-specific packaging, file permission, or storage decision introduced the exposure.

Root Cause

The root cause is improper protection of sensitive files or data structures used by the Prisma Access Agent on Linux. Configuration material and credentials are accessible to standard user accounts rather than being restricted to the agent's service identity or a privileged group. Palo Alto Networks has not published low-level implementation details in the public advisory.

Attack Vector

An attacker must first obtain local shell or code execution on the Linux endpoint under any authenticated user context. The attacker then reads the agent's on-disk configuration or credential store using standard file system operations. Harvested credentials can be replayed against Prisma Access to impersonate the legitimate user or agent. The vulnerability cannot be triggered remotely without a prior local foothold.

See the Palo Alto Networks advisory for CVE-2026-0305 for vendor-supplied technical details.

Detection Methods for CVE-2026-0305

Indicators of Compromise

Unexpected read access from non-root or non-service accounts to Prisma Access Agent configuration and credential files on Linux hosts
Prisma Access authentication events originating from IP addresses or user agents inconsistent with the assigned endpoint
Copy or archive operations targeting agent installation directories by interactive shell sessions

Detection Strategies

Enable Linux audit rules (auditd) on Prisma Access Agent directories to log file open and read events by unexpected UIDs
Correlate local file access telemetry with Prisma Access authentication logs to identify credential reuse from unfamiliar sources
Hunt for shell one-liners that enumerate agent directories using find, cat, grep, or tar against known agent paths

Monitoring Recommendations

Forward endpoint file access, process execution, and Prisma Access authentication events to a centralized SIEM or data lake for correlation
Baseline which user identities are expected to interact with the Prisma Access Agent on Linux and alert on deviations
Monitor for outbound transfers of small archives from Linux endpoints shortly after local access to agent directories

How to Mitigate CVE-2026-0305

Immediate Actions Required

Inventory all Linux endpoints running the Palo Alto Networks Prisma Access Agent and identify affected versions
Apply the fixed Prisma Access Agent for Linux version listed in the Palo Alto Networks advisory
Rotate any credentials issued to or cached by the Prisma Access Agent on affected Linux hosts
Review Prisma Access authentication logs for suspicious activity predating the patch deployment

Patch Information

Palo Alto Networks has published fixed versions for the Prisma Access Agent on Linux. Consult the official Palo Alto Networks security advisory for CVE-2026-0305 for the specific patched release, upgrade procedure, and any prerequisites. Non-Linux Prisma Access Agent platforms do not require action for this CVE.

Workarounds

Restrict interactive and SSH access to Linux endpoints running the Prisma Access Agent to trusted administrators only
Enforce least-privilege user accounts on affected Linux systems to reduce the population of local users who could exploit the flaw
Apply file system access controls to further restrict read access to the agent's configuration and credential directories where operationally feasible

bash

# Example: audit read access to Prisma Access Agent directories on Linux
# Adjust the path to match your installation location
sudo auditctl -w /opt/paloaltonetworks/prismaaccess/ -p r -k prisma_agent_read
sudo ausearch -k prisma_agent_read --start today