CVE-2026-0306: Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
CVE-2026-0306
Summary
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls.
The Prisma Access Agent on macOS is not affected.
Products covered
Prisma Access Agent
Prisma Access Agent 0
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Prisma Access Agent on Windows | 24.0 through 26.2 | Upgrade to 26.2.1 or later. |
Prisma Access Agent on macOS | No action needed. |
Vendor-listed fixes
Prisma Access Agent 0 >= 26.2.1 on Windows
Prisma Access Agent All on macOS
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.