CVE-2026-0312: Checkov by Prisma Cloud: Path Traversal Vulnerabilities
CVE-2026-0312
Summary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Products covered
Checkov by Prisma Cloud
Checkov by Prisma Cloud 3.2.0
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Checkov by Prisma Cloud 3.2 | 3.2.0 through 3.2.501 | Upgrade to 3.2.502 or later. |
Vendor-listed fixes
Checkov by Prisma Cloud 3.2.0 >= 3.2.502
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.