Palo Alto Networks Security Advisories / CVE-2026-0302

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

Urgency MODERATE

047910
Severity 1.1 · LOW
Exploit Maturity UNREPORTED
Response Effort MODERATE
Recovery USER
Value Density DIFFUSE
Attack Vector LOCAL
Attack Complexity LOW
Attack Requirements NONE
Automatable NO
User Interaction PASSIVE
Product Confidentiality NONE
Product Integrity LOW
Product Availability NONE
Privileges Required LOW
Subsequent Confidentiality HIGH
Subsequent Integrity HIGH
Subsequent Availability HIGH

Description

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Product Status

VersionsAffectedUnaffected
Checkov by Prisma Cloud 3.2.0< 3.2.502>= 3.2.502

Required Configuration for Exposure

No special configuration is required to be affected by this issue. 

Severity: LOW, Suggested Urgency: MODERATE

If the user is able to influence input consumed by a Checkov scan.
LOW - CVSS-BT: 1.1 /CVSS-B: 4.7 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber)

Exploitation Status

Palo Alto Networks is not aware of any malicious exploitation of this issue. 

Weakness Type and Impact

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CAPEC-88 OS Command Injection

Solution

Version
Minor Version
Suggested Solution
Checkov by Prisma Cloud 3.2
3.2.0 through 3.2.501 Upgrade to 3.2.502 or later.

Workarounds and Mitigations

No known workarounds exist for this issue.

Acknowledgments

Palo Alto Networks thanks George Gherasim for discovering and reporting this issue.

CPE Applicability

Timeline

Initial Publication
© 2026 Palo Alto Networks, Inc. All rights reserved.