Palo Alto Networks Cortex XDR Agent Improper Detection Mechanism Vulnerability on Windows

A vulnerability exists in the Palo Alto Networks Cortex XDR agent for Windows, allowing users with non-administrative privileges to disable the agent. This issue can also be exploited by malware to deactivate the Cortex XDR agent, potentially leading to malicious activities.

Impact

Disabling the Cortex XDR agent, which could allow malware to perform harmful actions without detection.

Remediation

Users can upgrade to Cortex XDR agent versions 8.3.101-CE, 8.5.1, 8.6, or any later versions to address this vulnerability.