Product:
Prisma Browser
Summary
A code injection vulnerability in Palo Alto Networks Prisma Browser on macOS fails to properly restrict access to its AppleScript interface. This allows a locally authenticated non-admin user to leverage the exposed Apple Event handler to send unauthorized commands to the browser.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-0236 |
Exploitation
To exploit this vulnerability, an attacker with local access and non-admin privileges can utilize the AppleScript interface to send unauthorized commands to the Prisma Browser. This can lead to unauthorized actions being performed within the browser, potentially compromising user data or browser integrity.
Affected Products
- Prisma Browser: Affected by the code injection vulnerability allowing unauthorized command execution.
Mitigation
To mitigate this vulnerability, users should ensure that only trusted individuals have local access to the system. Additionally, keeping the Prisma Browser updated to the latest version can help protect against known vulnerabilities.