CVE-2025-0119 — Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM
A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host …
Published: 2025-04-11 · CVSS: 6.3 · CVSS 4.0
A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7