Home

Description

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

PUBLISHED Reserved 2025-05-02 | Published 2025-06-12 | Updated 2026-02-26 | Assigner palo_alto




HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/R:U/V:D/U:Amber

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status
unaffected

All (custom) before 6.3.3
unaffected

Default status
unaffected

11.2.0 (custom) before 11.2.6
affected

11.1.0 (custom) before 11.1.10
affected

10.2.0 (custom) before 10.2.14
affected

10.1.0 (custom) before 10.1.14-h15
affected

Default status
unaffected

All (custom)
unaffected

Timeline

2025-06-11:Initial Publication

Credits

Visa Inc. finder

References

security.paloaltonetworks.com/CVE-2025-4230 vendor-advisory

cve.org (CVE-2025-4230)

nvd.nist.gov (CVE-2025-4230)

Download JSON