CVE-2026-0302

LowCVSS 1.1

Published: 10/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 10/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

55th percentile - higher than 55% of all known CVEs

Summary

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Risk Assessment

A local user could execute arbitrary system commands with the privileges of the Checkov process, potentially leading to privilege escalation or host compromise.

Recommendation

Update Checkov to a patched version and restrict local access to systems where Checkov is executed.

Other vulnerabilities in Checkov by Prisma Cloud

CVE-2026-0303Low
A code execution vulnerability in Palo Alto Networks Checkov by Prisma Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Original NVD description (English source)

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS