The vulnerability arises from incorrect authorization logic within Trust Protection Foundation, allowing an attacker to bypass established access controls and carry out actions on resources that should be restricted. The primary consequence is the unauthorized use of system functionality and potential manipulation of protected data, representing a moderate impact on confidentiality and integrity but not necessarily leading to full system compromise.

Both major releases of Palo Alto Networks Trust Protection Foundation—24.x and 25.x—are affected. Vulnerable versions include 24.1.0 through 24.1.12, 24.3.0 through 24.3.5, 25.1.0 through 25.1.7, and 25.3.0 through 25.3.2. The description does not specify additional hardware or firmware variants, so the listed software versions constitute the current scope.

The CVSS score of 5.1 indicates a moderate severity level. No EPSS score is supplied, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited exploitation activity to date. The attack vector is inferred to be either authenticated or local, since the flaw hinges on control over authorization checks; however, the description does not detail the exact prerequisites, so the risk assessment remains conservative. With official patches available, the likelihood of successful exploitation decreases when those updates are applied.