CVE-2026-0237
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Risk Assessment
The organization faces the risk of privilege escalation and browser integrity compromise by a local user, potentially leading to data leakage or unauthorized actions in the corporate environment.
Recommendation
It is recommended to immediately update Palo Alto Networks Prisma® Browser to the latest patched version and restrict local access to macOS systems for unauthorized users.
Other vulnerabilities in Palo Alto Networks Prisma Browser
See all- CVE-2026-0290Low
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a local attacker to view sensitive data.
- CVE-2026-0289Low
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a user to bypass intended security controls.
- CVE-2026-0236High
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface, allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
Original NVD description (English source)
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.