CVE-2025-4228Low

CVE-2025-4228 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

Published
June 11, 2025
Last Modified
June 11, 2025

🔗 CVE IDs covered (1)

CVE-2025-4228 →

📋 Description

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.

🎯 Affected products1

  • Cortex XDR Broker VM

✅ Remediation

This issue is fixed in Cortex XDR Broker VM 27.0.26, and all later Cortex XDR Broker VM versions. * If you enabled automatic upgrades for Broker VM, then no action is required at this time. * If you did not enable automatic upgrades, then we recommend that you do so for Broker VM to ensure that you always have the latest security patches installed in your software. Workarounds and mitigations: No known workarounds or mitigations exist for this issue.

🔗 References (1)