Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-0002 EUVD-2023-12107GHSA-55pm-78cq-2wj2

Cortex XDR Agent: Product Disruption by Local Windows User

Published Feb 8, 2023 · Updated Mar 25, 2025 · Assigned by palo_alto

Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Cortex XDR agent 7.5 – < 7.5.101-CE, 5.0 – < 5.0.12.22203 7.9 All

Advisories 1

References