CVE-2025-0113
Medium
Description
A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from the host network used by Broker VM. This may allow access to read files sent for analysis and logs transmitted by the Cortex XDR Agent to the Cortex XDR server.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Cortex XDR Broker VM
PublishedFeb 12, 2025
First seenFeb 12, 2025
Weakness typeCWE-424CWE-424
How to fix
Update
- Palo Alto Networks Cortex XDR Broker VM26.0.116 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Palo Alto Networks Cortex XDR Broker VM | 1.0.0 ≤ v < 26.0.116 | 26.0.116 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.