Low · 1.1 CVE-2026-0302 EUVD-2026-75270GHSA-9wwx-r2gg-j99v

Checkov by Prisma Cloud: OS Command Injection Vulnerability

Published Sep 10, 2026 · Updated Sep 10, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: Checkov by Prisma Cloud Category: Network devices

Description

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto Networks	Checkov by Prisma Cloud	3.2.0 – < 3.2.502	3.2.502

Advisories 1

WID-SEC-2026-3297 Palo Alto Networks Checkov by Prisma Cloud: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 9, 2026

References

https://security.paloaltonetworks.com/CVE-2026-0302 vendor-advisory