CVE-2026-0302: Palo Alto Networks Checkov By Prisma Cloud

Low severity, CVSS 1.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Affected products

• Palo Alto Networks Checkov By Prisma Cloud: from 3.2.0, before 3.2.502 (fixed in 3.2.502)

Published 2026-09-10. Last modified 2026-09-10.