CVE-2026-0303

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

Severity
Low 2.4
CVSS 4.0
Exploited
Not listed
EPSS
0.001
2.9th percentile
Discovered by
Third party
Vendor-published field
Published
Sep 10, 2026
Assigned by palo_alto

Description

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Weakness: CWE-829

Affected products

Vendor Product Category Matched by
Palo Alto Networks Prisma Cloud Cloud Security cna-assigner
Vendor-reported products (1)
  • Palo Alto Networks · Checkov by Prisma Cloud

Credit

Michael Adedeji

Vendor remediation

Version Minor Version Suggested Solution Checkov by Prisma Cloud 3.2 3.2.0 through 3.2.531 Upgrade to 3.2.532or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.

Something wrong here?