CVE-2026-0273

Vulnerability

A command injection vulnerability exists in Palo Alto Networks PAN-OS software, affecting PA-Series, VM-Series firewalls, and Panorama (virtual and M-Series). This issue allows an authenticated administrator to bypass system restrictions and execute arbitrary commands with root privileges. No special configuration is required to be affected by this vulnerability.

Exploitation

An attacker must possess administrative access to the PAN-OS CLI or Web UI to exploit this vulnerability. The attacker can then leverage this access to inject commands that bypass system restrictions and execute arbitrary code as the root user.

Impact

Successful exploitation of this vulnerability allows an authenticated administrator to execute arbitrary commands as the root user, leading to a complete compromise of the affected system. This could result in unauthorized access, data exfiltration, or further system manipulation.

Mitigation

Palo Alto Networks has not yet released a patched version for this vulnerability. They recommend restricting access to the management interface to only trusted internal IP addresses as a mitigation strategy. Further information can be found in their LIVEcommunity article and official documentation [1].