A denial of service in Palo Alto Networks PAN‑OS allows an authenticated user with a read‑only administrator role to trigger a system crash by sending a specially crafted API request. The flaw is categorized as CWE‑754 and results in the device becoming unresponsive, affecting availability for legitimate users. The impact is limited to service disruption on the affected appliance and does not expose data or allow arbitrary code execution.

Affected products include Palo Alto Networks Cloud NGFW, PAN‑OS, and Prisma Access. Vulnerable PAN‑OS versions span from 11.1.0 through 11.1.16‑h*, 12.1.2 through 12.1.10‑h*, and 12.2.2 through 12.2.3‑h*. All older unsupported PAN‑OS releases are also impacted. The specific upgrade paths are 12.2.4 or later, 12.1.10‑h2 or later, 11.2.16 or later, and 11.1.16‑h3 or later.

The CVSS score is 1.2, indicating a very low severity. The EPSS score is not available, so precise exploitation likelihood cannot be determined. This vulnerability is not listed in CISA KEV, suggesting no widespread exploitation has been observed. The attack requires authenticated access to the management interface and a read‑only administrator role; therefore, exposure is limited to internal systems with management access. Once triggered, the service availability is compromised until the device is rebooted or patched.