CVE-2026-0306: Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
CVE-2026-0306
Summary
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.
The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.
Products covered
Prisma Access Agent
Prisma Access Agent 0
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Prisma Access Agent on Windows | 24.0 through 26.2.2 | Upgrade to 26.3 or later. |
Prisma Access Agent on macOS | 24.0 through 26.2.2 | Upgrade to 26.3 or later. |
Prisma Access Agent on Linux | No action needed. | |
Prisma Access Agent on iOS | No action needed. | |
Prisma Access Agent on Android | No action needed. | |
Prisma Access Agent on Chrome OS | No action needed. |
Vendor-listed fixes
Prisma Access Agent 0 >= 26.3 on Windows (ETA: 08/20), >= 26.3 on macOS (ETA: 08/20)
Prisma Access Agent All on Linux, All on iOS, All on Android, All on Chrome OS
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.