CVE-2026-0311: Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
CVE-2026-0311
Summary
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Products covered
Checkov by Prisma Cloud
Checkov by Prisma Cloud 0
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Checkov by Prisma Cloud 3.3 | 3.2.0 through 3.3.24 | Upgrade to 3.3.25 or later. |
Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.
Vendor-listed fixes
Checkov by Prisma Cloud 0 >= 3.3.25
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.