CVE-2026-0306
Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
Description
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.
Weakness: CWE-693
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported products (2)
- Palo Alto Networks · Prisma Access Agent
- Palo Alto Networks · Prisma Access Agent — vendor states not affected
Credit
Vladislav Ovitchinikov and Daniel Cuthbert
Vendor remediation
VersionMinor VersionSuggested SolutionPrisma Access Agent on Windows24.0 through 26.2 Upgrade to 26.2 or later.Prisma Access Agent on Linux No action needed.Prisma Access Agent on macOS No action needed.Prisma Access Agent on iOS No action needed. Prisma Access Agent on Android No action needed. Prisma Access Agent on ChromeOS No action needed.