CVE-2025-0105: Palo Alto Networks Expedition

Critical severity, CVSS 9.1. EPSS: 13.3% chance of exploitation in the next 30 days.

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.

Affected products

• Palo Alto Networks Expedition: before 1.2.101 (fixed in 1.2.101)

Published 2025-01-11. Last modified 2026-06-17.