CVE-2025-2180: Palo Alto Networks Checkov By Prisma Cloud

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

Affected products

• Palo Alto Networks Checkov By Prisma Cloud: from 3.2.0, before 3.2.415 (fixed in 3.2.415)

Published 2025-08-13. Last modified 2026-06-17.