CVE-2026-0294: Palo Alto Networks Prisma Access Agent

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

Affected products

• Palo Alto Networks Prisma Access Agent: before 26.3 (fixed in 26.3)

Published 2026-08-13. Last modified 2026-09-09.