Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-0230 EUVD-2026-11249GHSA-2ghj-fm9g-w3jm

Cortex XDR Agent: Local Administrator can disable the agent on macOS

Published Mar 11, 2026 · Updated Mar 11, 2026 · Assigned by palo_alto

Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent. This issue could be leveraged by malware to perform malicious activity without detection.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Cortex XDR Agent 8.7-CE – < 8.7.101-CE, 8.3-CE – < 8.3.102-CE 9.1.0

Advisories 1

References