CVE-2025-4616
LowCVSS 1.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.
Risk Assessment
Risk of weakening browser security controls by a non-privileged user, potentially leading to security policy violations.
Recommendation
Apply vendor patches and restrict local access to systems running Prisma Browser.
Other vulnerabilities in Prisma Browser
See all- CVE-2026-0275Medium
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser on macOS allows a locally authenticated administrator with access to the local filesystem to perform actions with root privileges.
- CVE-2026-0235Medium
A race condition vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to bypass certain access and data control policies.
- CVE-2025-4618Medium
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.
- CVE-2025-4617Low
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
Original NVD description (English source)
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS