CVE-2026-0312

Checkov by Prisma Cloud: Path Traversal Vulnerabilities

Severity

Medium 4.3

CVSS 4.0

Adjacent, local or physical access what this means

Exploited

Not listed

EPSS

0.001

3.1th percentile

Discovered by

Third party

Vendor-published field

Published

Oct 14, 2026

Assigned by palo_alto

Description

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.

Weakness: CWE-22

Affected products

Vendor	Product	Category	Matched by
Palo Alto Networks	Prisma Cloud	Cloud Security	cna-assigner

Vendor-reported products (1)

Palo Alto Networks · Checkov by Prisma Cloud

Credit

Muhammad Ibrahim

Vendor remediation

Version Minor Version Suggested Solution Checkov by Prisma Cloud 3.3 3.2.0 through 3.3.24Upgrade to 3.3.25 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.

References

Checkov Security Advisory

Something wrong here?