Skip to content
OpenAdvisories
Medium · 5.2 CVE-2024-5907 EUVD-2024-47039GHSA-vh98-48jw-fxwj

Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability

Published Jun 12, 2024 · Updated Nov 4, 2026 · Assigned by palo_alto

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Cortex XDR Agent 7.9-CE – < 7.9.102-CE, 8.1.0, 8.2.0 – < 8.2.3, 8.3.0 – < 8.3.1 7.9.102-CE

References