CVE-2025-0112 — Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent…
Published: 2025-02-19 · CVSS: 6.8 · CVSS 4.0
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7