CVE-2026-0311
LowCVSS 1.1Summary
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
Risk Assessment
An attacker with local access could exploit this to probe or reach internal network services, potentially leading to information disclosure or further escalation.
Recommendation
Update Checkov by Prisma Cloud to a patched version and limit local host access and internal network segmentation.
Other vulnerabilities in Checkov by Prisma Cloud
See all- CVE-2026-0312Medium
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
- CVE-2026-0303Low
A code execution vulnerability in Palo Alto Networks Checkov by Prisma Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
- CVE-2026-0302Low
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Original NVD description (English source)
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS