CVE-2026-0312
MediumCVSS 4.3Summary
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Risk Assessment
A local user can overwrite or create arbitrary files on the scanning system, potentially leading to data integrity compromise or code execution.
Recommendation
Update Checkov to a patched version and restrict local access to systems performing scans.
Other vulnerabilities in Checkov by Prisma Cloud
See all- CVE-2026-0311Low
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
- CVE-2026-0303Low
A code execution vulnerability in Palo Alto Networks Checkov by Prisma Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
- CVE-2026-0302Low
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Original NVD description (English source)
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS