Palo Alto Networks Cortex XDR Broker VM Command Injection Vulnerability

A command injection vulnerability exists in the Palo Alto Networks Cortex XDR Broker VM, allowing authenticated users to execute arbitrary operating system commands with root privileges on the host machine running the Broker VM. This vulnerability affects versions of Cortex XDR Broker VM prior to 26.100.3.

Impact

Exploitation of this vulnerability allows for unauthorized execution of commands with root privileges on the host operating system, potentially leading to unauthorized access or modification of system resources.

Remediation

Users can upgrade to Cortex XDR Broker VM version 26.100.3 or later to address this vulnerability. If automatic upgrades are not enabled, it is recommended to do so to ensure the latest security patches are applied.