CVE-2025-0119: Palo Alto Networks Cortex Xdr Broker Vm

Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.

Affected products

• Palo Alto Networks Cortex Xdr Broker Vm: from 1.0.0, before 26.100.3 (fixed in 26.100.3)

Published 2025-04-11. Last modified 2026-06-17.