CVE-2026-0303 PUBLISHED

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

Assigner: palo_alto
Reserved: 03.11.2025 Published: 10.09.2026 Updated: 10.09.2026

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber
CVSS Score: 2.4

If the user scans infrastructure as code (IaC) files from untrusted sources.

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	None	Confidentiality	High
Attack Complexity	Low	Integrity	Low	Integrity	High
Attack Requirements	None	Availability	None	Availability	High
Privileges Required	None
User Interaction	Passive

If the user scans infrastructure as code (IaC) files from untrusted sources.

CVSS 4.0

Product Status

Vendor	Palo Alto Networks
Product	Checkov by Prisma Cloud
Versions	Default: unaffected affected from 3.2.0 to 3.2.532 (excl.)

Exploits

Palo Alto Networks is not aware of any malicious exploitation of this issue.

Credits

Michael Adedeji finder

References

https://security.paloaltonetworks.com/CVE-2026-0303

Problem Types

CWE-829 Inclusion of Functionality from Untrusted Control Sphere CWE

Impacts

CAPEC-248 Command Injection