CVE-2023-0002: Palo Alto Networks Cortex Xdr Agent

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

Affected products

• Palo Alto Networks Cortex Xdr Agent: from 5.0, before 5.0.12.22203 (fixed in 5.0.12.22203); from 7.5, up to and including 7.5.101

Published 2023-02-08. Last modified 2026-06-17.