Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-0268
PUBLISHED
More InfoOfficial Page
Assigner-palo_alto
Assigner Org ID-d6c1279f-00f6-4ef7-9217-f89ffe703ec0
View Known Exploited Vulnerability (KEV) details
Published At-10 Jun, 2026 | 20:40
Updated At-11 Jun, 2026 | 13:57
Rejected At-
▼CVE Numbering Authority (CNA)
Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Affected Products
Vendor
Palo Alto Networks, Inc.Palo Alto Networks
Product
Prisma Access Agent
Platforms
  • Linux
Default Status
unaffected
Versions
Affected
  • From 0 before 26.2.1 (custom)
    • -> unaffectedfrom26.2.1
Vendor
Palo Alto Networks, Inc.Palo Alto Networks
Product
Prisma Access Agent
Platforms
  • Windows
  • macOS
  • iOS
  • Android
  • Chrome OS
Default Status
unaffected
Versions
Unaffected
  • All (custom)
Problem Types
TypeCWE IDDescription
CWECWE-424CWE-424 Improper Protection of Alternate Path
Type: CWE
CWE ID: CWE-424
Description: CWE-424 Improper Protection of Alternate Path
Metrics
VersionBase scoreBase severityVector
4.04.4MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Version: 4.0
Base score: 4.4
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-180CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
CAPEC ID: CAPEC-180
Description: CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Solutions

VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Linux 25.7 through 26.2.0 Upgrade to 26.2.1 or later. Prisma Access Agent All on Windows No action needed. Prisma Access Agent All on macOS No action needed. Prisma Access Agent All on iOS No action needed. Prisma Access Agent All on Android No action needed. Prisma Access Agent All on Chrome OS No action needed.

Configurations

No special configuration is required.

Workarounds

There are no known workarounds for this issue.

Exploits

Palo Alto Networks is not aware of any malicious exploitation of this issue.

Credits
finder
our internal security research teams
Timeline
EventDate
Initial publication.2026-06-10 16:00:00
Event: Initial publication.
Date: 2026-06-10 16:00:00
Replaced By
Rejected Reason
References
HyperlinkResource
https://security.paloaltonetworks.com/CVE-2026-0268
vendor-advisory
Hyperlink: https://security.paloaltonetworks.com/CVE-2026-0268
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found