CVE-2025-4617
Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser
Severity
Low 1.1
CVSS 4.0
Exploited
Not listed
EPSS
0.001
2.9th percentile
Discovered by
Third party
Published by the vendor
Published
Nov 14, 2025
Assigned by palo_alto
Description
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
Weakness: CWE-424
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Browser | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Prisma Browser
Credit
Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.
Vendor remediation
Version Minor Version Suggested Solution Prisma Browser 0Upgrade to or later.