Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

A local attacker could bypass authentication controls in Prisma Access Agent's Endpoint DLP component and execute operations they shouldn't be permitted to do, potentially exposing sensitive data or disrupting data loss prevention protections on corporate endpoints.

Organizations using Prisma Access Agent for endpoint data loss prevention on macOS or Windows workstations should address this vulnerability. This affects corporate endpoints where sensitive data is accessed, including engineering workstations, administrative computers, and user devices handling confidential information.

An attacker with local access to a workstation running the Prisma Access Agent could exploit the authorization bypass to execute privileged operations without proper authentication, circumventing the endpoint DLP controls designed to prevent unauthorized data access or exfiltration.