CVE-2025-0139CWE-266

Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability

Medium · published July 9, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-07-09T22:57Z
EPSS history
Timeline
  • 09 JUL 22:57Z
    Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability
    cvelistv5