CVE-2022-0029: Palo Alto Networks Cortex Xdr Agent

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

Affected products

• Palo Alto Networks Cortex Xdr Agent: from 5.0, before 5.0.12 (fixed in 5.0.12); from 7.5, before 7.5.101 (fixed in 7.5.101); from 7.7, before 7.7.3 (fixed in 7.7.3)

Published 2022-09-14. Last modified 2026-06-17.