CVE-2022-0031: Palo Alto Networks Cortex Xsoar

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Affected products

• Palo Alto Networks Cortex Xsoar: version 6.5.0 only; version 6.6.0 only; version 6.8.0 only

Published 2022-11-09. Last modified 2026-06-17.