{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0302", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:00.329Z", "datePublished": "2026-09-10T06:05:20.011Z", "dateUpdated": "2026-09-10T06:05:20.011Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-09-10T06:05:20.011Z"}, "title": "Checkov by Prisma Cloud: OS Command Injection Vulnerability", "datePublic": "2026-09-09T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "version": "3.2.0", "lessThan": "3.2.502", "changes": [{"at": "3.2.502", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.502"}]}]}], "descriptions": [{"lang": "en", "value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.<br></p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0302", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "If the user is able to influence input consumed by a Checkov scan."}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "HIGH", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be affected by this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "No special configuration is required to be affected by this issue.&nbsp;"}]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "No known workarounds exist for this issue."}]}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through\u00a03.2.501\n Upgrade to 3.2.502 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n <td>Checkov by Prisma Cloud 3.2<br></td>\n <td>3.2.0 through&nbsp;3.2.501</td>\n <td>Upgrade to 3.2.502 or later.</td>\n </tr></tbody></table>"}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.&nbsp;"}]}], "timeline": [{"time": "2026-09-09T16:00:00.000Z", "lang": "en", "value": "Initial Publication"}], "credits": [{"lang": "en", "value": "George Gherasim", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501"]}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Checkov by Prisma Cloud", "vendor": "Palo Alto Networks", "versions": [{"changes": [{"at": "3.2.502", "status": "unaffected"}], "lessThan": "3.2.502", "status": "affected", "version": "3.2.0", "versionType": "custom"}]}], "source": "psirt@paloaltonetworks.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov."}], "id": "CVE-2026-0302", "lastModified": "2026-09-10T07:17:00.843", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "PASSIVE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}, "published": "2026-09-10T07:17:00.843", "references": [{"source": "psirt@paloaltonetworks.com", "url": "https://security.paloaltonetworks.com/CVE-2026-0302"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}

{}

{"created": "2026-09-10T07:30:07.679588+00:00", "updated": "2026-09-10T07:30:07.679595+00:00", "vendors": []}