CVE-2025-0112
Cortex XDR Agent: Local Windows User Can Disable the Agent
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activity.
Reserved 2024-12-20 | Published 2025-02-19 | Updated 2025-02-20 | Assigner palo_altoCWE-754 Improper Check for Unusual or Exceptional Conditions
| 2025-02-12: | Initial Publication |
Eldar Aharoni of Palo Alto Networks
security.paloaltonetworks.com/CVE-2025-0112
Support options
