CVE-2025-0134 — Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM
A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating …
Published: 2025-05-14 · CVSS: 6.5 · CVSS 4.0
A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7