CVE-2025-0129

Critical

Description

An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.

SeverityCritical

CVSS9.3

Exploit probability—

Product

Prisma Access Browser

PublishedApr 11, 2025

First seenApr 11, 2025

Weakness typeCWE-754CWE-754

How to fix

Update

Palo Alto Networks Prisma Access Browser132.83.3017.1 or later

Vendor advisories

security.paloaltonetworks.com/PAN-SA-2025-0008

Affected products

Product	Affected versions	Fixed in
Palo Alto Networks Prisma Access Browser	1 ≤ v < 132.83.3017.1	132.83.3017.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.