CVE-2026-0302 - Vulnerability Details - OpenCVE

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Palo Alto Networks	Checkov By Prisma Cloud

No data.

No data.

References

Link	Providers
https://security.paloaltonetworks.com/CVE-2026-0302

History

Thu, 10 Sep 2026 06:30:00 +0000

Type	Values Removed	Values Added
Description		An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Title		Checkov by Prisma Cloud: OS Command Injection Vulnerability
First Time appeared		Palo Alto Networks Palo Alto Networks checkov By Prisma Cloud
Weaknesses		CWE-78
CPEs		cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud::::::::
Vendors & Products		Palo Alto Networks Palo Alto Networks checkov By Prisma Cloud
References		https://security.paloaltonetworks.com/CVE-2026-0302
Metrics		cvssV4_0 `{'score': 1.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}`

MITRE

Status: PUBLISHED

Assigner: palo_alto

Published: 2026-09-10T06:05:20.011Z

Updated: 2026-09-10T06:05:20.011Z

Reserved: 2025-11-03T20:45:00.329Z

Link: CVE-2026-0302

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-10T07:17:00.843

Modified: 2026-09-10T07:17:00.843

Link: CVE-2026-0302

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0302", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:00.329Z", "datePublished": "2026-09-10T06:05:20.011Z", "dateUpdated": "2026-09-10T06:05:20.011Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-09-10T06:05:20.011Z"}, "title": "Checkov by Prisma Cloud: OS Command Injection Vulnerability", "datePublic": "2026-09-09T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "version": "3.2.0", "lessThan": "3.2.502", "changes": [{"at": "3.2.502", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.502"}]}]}], "descriptions": [{"lang": "en", "value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.<br></p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0302", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "If the user is able to influence input consumed by a Checkov scan."}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "HIGH", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be affected by this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "No special configuration is required to be affected by this issue. "}]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "No known workarounds exist for this issue."}]}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through\u00a03.2.501\n Upgrade to 3.2.502 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n <td>Checkov by Prisma Cloud 3.2<br></td>\n <td>3.2.0 through 3.2.501</td>\n <td>Upgrade to 3.2.502 or later.</td>\n </tr></tbody></table>"}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue. "}]}], "timeline": [{"time": "2026-09-09T16:00:00.000Z", "lang": "en", "value": "Initial Publication"}], "credits": [{"lang": "en", "value": "George Gherasim", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501"]}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Checkov by Prisma Cloud", "vendor": "Palo Alto Networks", "versions": [{"changes": [{"at": "3.2.502", "status": "unaffected"}], "lessThan": "3.2.502", "status": "affected", "version": "3.2.0", "versionType": "custom"}]}], "source": "psirt@paloaltonetworks.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov."}], "id": "CVE-2026-0302", "lastModified": "2026-09-10T07:17:00.843", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "PASSIVE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}, "published": "2026-09-10T07:17:00.843", "references": [{"source": "psirt@paloaltonetworks.com", "url": "https://security.paloaltonetworks.com/CVE-2026-0302"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}