CVE-2026-0312: Checkov by Prisma Cloud: Path Traversal Vulnerabilities
CVE-2026-0312
Summary
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Products covered
Checkov by Prisma Cloud
Checkov by Prisma Cloud 3.2.0
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Checkov by Prisma Cloud 3.2 | 3.2.0 through 3.2.531 | Upgrade to 3.2.532or later. |
Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.
Vendor-listed fixes
Checkov by Prisma Cloud 3.2.0 >= 3.2.532
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.