CVE-2025-4616
Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser
Severity
Low 1.1
CVSS 4.0
Exploited
Not listed
EPSS
0.001
0.5th percentile
Discovered by
Third party
Published by the vendor
Published
Nov 14, 2025
Assigned by palo_alto
Description
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.
Weakness: CWE-354
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Browser | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Prisma Browser
Credit
Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.
Vendor remediation
Version Minor Version Suggested Solution Prisma BrowserUpgrade to 142.15.6.60 or later.