CVE-2026-0306: Palo Alto Networks Prisma Access Agent

Medium severity, CVSS 5.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

Affected products

• Palo Alto Networks Prisma Access Agent: before 26.2 (fixed in 26.2)

Published 2026-09-10. Last modified 2026-09-10.