CVE-2024-5909: Palo Alto Networks Cortex Xdr Agent

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

Affected products

• Palo Alto Networks Cortex Xdr Agent: from 7.9, before 7.9.102 (fixed in 7.9.102); from 8.1, before 8.1.2 (fixed in 8.1.2); from 8.2, before 8.2.1 (fixed in 8.2.1)

Published 2024-06-12. Last modified 2026-06-17.