Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-0268 EUVD-2026-36144GHSA-cxwj-f3w7-6266

Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

Published Jun 10, 2026 · Updated Jun 11, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: Prisma Access Agent Category: Network devices

Description

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel.

This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Prisma Access Agent < 26.2.1 26.2.1

References