CVE-2025-4617: Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Severity: low (CVSS 1.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-14 · updated 2026-10-07
Weakness: CWE-424

Description

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.

Affected products

Palo Alto Networks Prisma Browser: from 142.15.6.0 through 142.15.6.60

References

https://security.paloaltonetworks.com/CVE-2025-4617

Get alerted when CVE-2025-4617 or the next vulnerability affects your stack