Product:
Prisma Browser
Summary
A race condition vulnerability in Palo Alto Networks Prisma Browser enables a locally authenticated non-admin user to bypass certain access and data control policies. This can lead to unauthorized access to sensitive information and manipulation of data. The vulnerability poses a medium severity risk due to its potential impact on confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.8 | CVE-2026-0235 |
Exploitation
To exploit this vulnerability, an attacker must be a locally authenticated non-admin user. By leveraging the race condition, the attacker can bypass access controls and data policies, allowing them to access or manipulate data that should be restricted. This requires a low level of privileges and no user interaction, making it easier for an attacker to execute.
Affected Products
- Prisma Browser: Affected by the race condition vulnerability allowing unauthorized access to data.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Prisma Browser and apply any available security patches. Additionally, organizations should implement strict access controls and monitor user activities to detect any unauthorized access attempts.