CVE-2026-0278CWE-693

Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows

Medium · published July 9, 2026

CVSS v4.0
5.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls.

The Prisma Access Agent on macOS is not affected.

The record
Technical detail
CVSS v4.0
5.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:C/RE:H/U:Amber
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-07-09T19:12Z
EPSS history
Timeline
  • 09 JUL 19:12Z
    Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
    cvelistv5