What’s Vulnerable › Vulnerabilities

CVE-2026-0237: Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-13 · updated 2026-10-26
• Weakness: CWE-424

Description

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

Affected products

• Palo Alto Networks Prisma Browser: before 146.16.6.165 — fixed in 146.16.6.165
• Palo Alto Networks Prisma Browser: before 146.16.6.165 — fixed in 146.16.6.165

How to fix

Upgrade to a fixed version: Palo Alto Networks Prisma Browser 146.16.6.165; Palo Alto Networks Prisma Browser 146.16.6.165. Check the vendor advisory for mitigations.

References

• https://security.paloaltonetworks.com/CVE-2026-0237

Get alerted when CVE-2026-0237 or the next vulnerability affects your stack