Skip to content
OpenAdvisories
High · 7.3 CVE-2026-0237 EUVD-2026-30062GHSA-7wx2-94c7-j77h

Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass

Published May 13, 2026 · Updated May 14, 2026 · Assigned by palo_alto

Description

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Prisma Browser < 146.16.6.165 146.16.6.165

References