Palo Alto Networks Prisma Browser Code Injection Vulnerability via AppleScript Interface on macOS

A code injection vulnerability exists in Palo Alto Networks Prisma Browser for macOS. The issue arises because the browser's AppleScript interface does not properly restrict access, allowing a locally authenticated non-admin user to exploit this vulnerability. By leveraging the exposed Apple Event handler, the user can send unauthorized commands to the browser.

Impact

Exploitation of this vulnerability allows for code injection, where unauthorized commands can be sent to the browser via AppleScript.