Product:
Prisma Browser
Summary
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-0237 |
Exploitation
To exploit this vulnerability, an attacker with local access and non-admin privileges can utilize the exposed communication channel to send unauthorized commands to the Prisma Browser. This can be achieved by crafting specific requests that the browser does not properly validate, allowing the attacker to bypass existing security measures.
Affected Products
- Prisma Browser: Vulnerable to unauthorized command execution due to improper access restrictions.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Prisma Browser and apply any available security patches. Additionally, restricting local access to the system can help prevent unauthorized users from exploiting this vulnerability.