A local attacker who can authenticate to the Prisma Access Agent on Linux can bypass the VPN enforcement controls and redirect traffic outside the intended VPN tunnel. This vulnerability does not expose remote code execution or privilege escalation beyond the local user’s scope but enables unauthorized data exfiltration or interception by forcing network flows to evade encryption and policy controls. The weakness is a classic input handling flaw (CWE‑424).

The vulnerability affects Palo Alto Networks Prisma Access Agent running on Linux versions 25.7 through 26.2.0. Other operating systems, including Windows, macOS, iOS, Android, and Chrome OS, are not impacted.

The CVSS score of 4.4 classifies the issue as low‑to‑moderate severity. Because the attacker must first gain local authenticated access to the host, the likelihood of exploitation is limited to environments where such access is possible. No public exploit information or KEV listing is available, and the EPSS score is not provided, suggesting a lower overall exploitation probability.