CVE-2025-4228
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
| CWE | CWE-266 |
| Vendor | palo alto networks |
| Product | cortex xdr broker vm |
| Published | Jun 12, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for palo alto networks cortex xdr broker vm
Be the first to know when new unknown vulnerabilities affecting palo alto networks cortex xdr broker vm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Palo Alto Networks / Cortex XDR Broker VM
27.0.0 < 27.0.26
References
Credits
This issue was discovered during an internal penetration test