Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-0268

Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

Medium4.4EPSS 0.10%
Published
Updated
Reserved
Assigned by
palo_alto

Description

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.

Timeline

  1. ID reserved

    By palo_alto

  2. · 7 months later

    Published

  3. · 1 day later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2026-0268, by who scored it
Scored byCVSSScoreVector
palo_altoCNA (assigner)4.0Medium4.4CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
NVDNVD · Analyzed4.0Medium4.4CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
EPSS (exploitation in 30 days)
0.10% · top 99% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.

Weakness

Affected products

What to do

Solution: VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Linux 25.7 through 26.2.0 Upgrade to 26.2.1 or later. Prisma Access Agent All on Windows No action needed. Prisma Access Agent All on macOS No action needed. Prisma Access Agent All on iOS No action needed. Prisma Access Agent All on Android No action needed. Prisma Access Agent All on Chrome OS No action needed.

Workaround: There are no known workarounds for this issue.

Exploitation: Palo Alto Networks is not aware of any malicious exploitation of this issue.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-0268 badge
[![CVE-2026-0268](https://trackcve.app/badge/CVE-2026-0268.svg)](https://trackcve.app/cve/CVE-2026-0268)

Record last updated .