Palo Alto Networks PAN-OS Command Injection Vulnerability for Authenticated Administrators

A command injection vulnerability exists in Palo Alto Networks PAN-OS software, allowing authenticated administrators with CLI access to bypass system restrictions and execute arbitrary commands as the root user. This vulnerability is not present in Cloud NGFW or Prisma Access. The risk is lower when CLI access is limited to a small group of administrators.

Impact

Exploitation of this vulnerability allows for command injection, with executed commands running as the root user.

Remediation

Administrators can upgrade to PAN-OS 11.2.6 or later, 11.1.10 or later, 10.2.14 or later, or 10.1.14-h15 or later, depending on their current version. Those on older, unsupported PAN-OS versions should upgrade to a supported fixed version.