CVE-2025-0134: Palo Alto Networks Cortex Xdr Broker Vm

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.

Affected products

• Palo Alto Networks Cortex Xdr Broker Vm: from 26.0.0, before 26.0.119 (fixed in 26.0.119)

Published 2025-05-14. Last modified 2026-06-17.