Palo Alto Networks Prisma Browser Improper Access Control Vulnerability on macOS

A vulnerability in Palo Alto Networks Prisma Browser for macOS has been identified, where improper protection of an alternate path allows locally authenticated non-admin users to access an internal automation bridge. This flaw enables the sending of unauthorized commands to the browser through an exposed communication channel, circumventing existing security measures.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution in the browser, bypassing security controls.