CVE-2026-0293 MEDIUM

CVE-2026-0293: Prisma Access Agent: Anti-Tamper Protection Bypass on Windows

Vendor Palo Alto Networks

Product Prisma Access Agent

Weakness CWE-693

Published August 13, 2026

Last update August 13, 2026

View on NVD All CVEs

CVSS base score

5.6/10

Attack vector Local

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/V:D/RE:M/U:Amber

What the vulnerability does

01Description

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Key dates

02Disclosure timeline

August 13, 2026 CVE published

August 13, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-0293 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/693.html AskarLabs — CWE-693 write-up Protection Mechanism Failure

Related vulnerabilities

04Related CVE

CVE-2024-11197 Lock User Account <= 1.0.5 - User Lock Bypass CVE-2024-0681 Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass CVE-2025-11260 WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass CVE-2024-13794 Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure CVE-2025-12094 OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing