CVE-2026-0312 (GCVE-0-2026-0312)
Vulnerability from cvelistv5
Published
2026-10-14 20:28
Modified
2026-10-15 18:40
Severity ?
4.3 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
CWE
  • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
References
Impacted products
Vendor Product Version
Palo Alto Networks Checkov by Prisma Cloud Version: 0   < 3.3.25
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:40:14.862502Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:40:29.605Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.3.25",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.3.25",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.3.25",
                  "versionStartIncluding": "3.3.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Ibrahim"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yuze Pan"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003ePath traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\u003c/span\u003e"
            }
          ],
          "value": "Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:28:18.276Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "Checkov Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0312"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud 3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e3.2.0 through 3.3.24\u003c/td\u003e\u003ctd\u003eUpgrade to 3.3.25 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud 3.3\n3.2.0 through 3.3.24Upgrade to 3.3.25 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Checkov by Prisma Cloud: Path Traversal Vulnerabilities",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eUntil a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.3.0",
        "Checkov by Prisma Cloud 3.3.1",
        "Checkov by Prisma Cloud 3.3.2",
        "Checkov by Prisma Cloud 3.3.3",
        "Checkov by Prisma Cloud 3.3.4",
        "Checkov by Prisma Cloud 3.3.5",
        "Checkov by Prisma Cloud 3.3.6",
        "Checkov by Prisma Cloud 3.3.7",
        "Checkov by Prisma Cloud 3.3.8",
        "Checkov by Prisma Cloud 3.3.9",
        "Checkov by Prisma Cloud 3.3.10",
        "Checkov by Prisma Cloud 3.3.11",
        "Checkov by Prisma Cloud 3.3.12",
        "Checkov by Prisma Cloud 3.3.13",
        "Checkov by Prisma Cloud 3.3.14",
        "Checkov by Prisma Cloud 3.3.15",
        "Checkov by Prisma Cloud 3.3.16",
        "Checkov by Prisma Cloud 3.3.17",
        "Checkov by Prisma Cloud 3.3.18",
        "Checkov by Prisma Cloud 3.3.19",
        "Checkov by Prisma Cloud 3.3.20",
        "Checkov by Prisma Cloud 3.3.21",
        "Checkov by Prisma Cloud 3.3.22",
        "Checkov by Prisma Cloud 3.3.23",
        "Checkov by Prisma Cloud 3.3.24"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0312",
    "datePublished": "2026-10-14T20:28:18.276Z",
    "dateReserved": "2025-11-03T20:45:11.196Z",
    "dateUpdated": "2026-10-15T18:40:29.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Checkov by Prisma Cloud: Path Traversal Vulnerabilities\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Muhammad Ibrahim\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Yuze Pan\"}], \"impacts\": [{\"capecId\": \"CAPEC-126\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-126 Path Traversal\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 4.3, \"Automatable\": \"NO\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"DIFFUSE\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Palo Alto Networks\", \"product\": \"Checkov by Prisma Cloud\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"3.3.25\", \"status\": \"unaffected\"}], \"version\": \"0\", \"lessThan\": \"3.3.25\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of these issues.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of these issues.\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-10-14T16:00:00.000Z\", \"value\": \"Initial Publication.\"}], \"solutions\": [{\"lang\": \"eng\", \"value\": \"Version\\nMinor Version\\nSuggested Solution\\nCheckov by Prisma Cloud 3.3\\n3.2.0 through 3.3.24Upgrade to 3.3.25 or later.\\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud 3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e3.2.0 through 3.3.24\u003c/td\u003e\u003ctd\u003eUpgrade to 3.3.25 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.\", \"base64\": false}]}], \"datePublic\": \"2026-10-14T16:00:00.000Z\", \"references\": [{\"url\": \"https://security.paloaltonetworks.com/CVE-2026-0312\", \"name\": \"Checkov Security Advisory\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003e\u003cspan\u003eUntil a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cspan\u003ePath traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\u003c/span\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-22\", \"description\": \"CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)\"}]}], \"configurations\": [{\"lang\": \"eng\", \"value\": \"No special configuration is required to be affected by this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"No special configuration is required to be affected by this issue.\", \"base64\": false}]}], \"x_affectedList\": [\"Checkov by Prisma Cloud 3.3.0\", \"Checkov by Prisma Cloud 3.3.1\", \"Checkov by Prisma Cloud 3.3.2\", \"Checkov by Prisma Cloud 3.3.3\", \"Checkov by Prisma Cloud 3.3.4\", \"Checkov by Prisma Cloud 3.3.5\", \"Checkov by Prisma Cloud 3.3.6\", \"Checkov by Prisma Cloud 3.3.7\", \"Checkov by Prisma Cloud 3.3.8\", \"Checkov by Prisma Cloud 3.3.9\", \"Checkov by Prisma Cloud 3.3.10\", \"Checkov by Prisma Cloud 3.3.11\", \"Checkov by Prisma Cloud 3.3.12\", \"Checkov by Prisma Cloud 3.3.13\", \"Checkov by Prisma Cloud 3.3.14\", \"Checkov by Prisma Cloud 3.3.15\", \"Checkov by Prisma Cloud 3.3.16\", \"Checkov by Prisma Cloud 3.3.17\", \"Checkov by Prisma Cloud 3.3.18\", \"Checkov by Prisma Cloud 3.3.19\", \"Checkov by Prisma Cloud 3.3.20\", \"Checkov by Prisma Cloud 3.3.21\", \"Checkov by Prisma Cloud 3.3.22\", \"Checkov by Prisma Cloud 3.3.23\", \"Checkov by Prisma Cloud 3.3.24\"], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.3.25\", \"versionStartIncluding\": \"3.3.0\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"shortName\": \"palo_alto\", \"dateUpdated\": \"2026-10-14T20:28:18.276Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-0312\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-15T18:40:14.862502Z\"}}}], \"providerMetadata\": {\"shortName\": \"CISA-ADP\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"dateUpdated\": \"2026-10-15T18:40:23.520Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-0312\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-14T20:28:18.276Z\", \"dateReserved\": \"2025-11-03T20:45:11.196Z\", \"assignerOrgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"datePublished\": \"2026-10-14T20:28:18.276Z\", \"assignerShortName\": \"palo_alto\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.