CVE-2025-0115
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.6
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Green
- EPSS probability
- 0.19%
- CWE
- CWE-41
- Published
- 2025-03-12
- Last modified
- 2026-03-13
Affected products
- Palo Alto Networks PAN-OS
- Palo Alto Networks PAN-OS
- Palo Alto Networks PAN-OS
- Palo Alto Networks PAN-OS
- Palo Alto Networks PAN-OS
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks Prisma Access
Weakness type
Related vulnerabilities
- CVE-2026-85978 — Unauthenticated Remote Code Execution in Akana API Platform
- CVE-2026-73019 — Windows URL Moniker Security Feature Bypass Vulnerability
- CVE-2026-72835 — filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization
- CVE-2026-66064 — goshs has ACL Bypass & Path Traversal
- CVE-2026-49401 — Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)
- CVE-2026-50568 — Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape
- CVE-2026-5816 — Improper Resolution of Path Equivalence in GitLab
- CVE-2026-34451 — Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories