Skip to content
OpenAdvisories
High · 7.3 CVE-2026-0236 EUVD-2026-30089GHSA-jf7x-wmp8-3g54

Prisma Browser: Code Injection Enables Security Controls Bypass

Published May 13, 2026 · Updated May 15, 2026 · Assigned by palo_alto

Description

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Prisma Browser < 146.16.6.165 146.16.6.165

References