CVE-2026-0275 in Prisma Browser
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.
Quick answer
Palo Alto Networks Prisma Browser should be reviewed and updated if it matches the affected versions. The recommended fix is to apply the vendor-supported patched version or the mitigation steps below, then retest the public website with Fixnx.
Who is affected
Affected versions
- Prisma Browser for macOS 150.33.2.0 before 150.33.2.46
Fixed versions
- Prisma Browser for macOS 150.33.2.46 or later
How to fix it
Update Prisma Browser. The old macOS build can let a local admin perform actions as root.
- Upgrade Prisma Browser to Prisma Browser for macOS 150.33.2.46 or later.
- Deploy the update to all macOS devices.
- Restart the browser after update.
- Review local admin access on affected devices.
Scan now. Google sign-in is only needed to unlock fix guidance.
Verify the fix
- Confirm Prisma Browser reports the fixed macOS version.
- Scan again and confirm CVE-2026-0275 is gone.
Related categories
Trusted references
FAQ
What is affected by CVE-2026-0275?
Palo Alto Networks Prisma Browser versions listed as affected should be reviewed: Prisma Browser for macOS 150.33.2.0 before 150.33.2.46.
What should I fix first?
Start with internet-facing sites, admin panels, login flows, plugins, themes, modules, packages, and systems that process user-controlled input or sensitive data.
How do I confirm the fix worked?
Apply the patched version or mitigation, clear caches where relevant, retest the affected workflow, and run a new Fixnx scan to verify public website exposure signals.
How are Fixnx security risk categories chosen?
Fixnx keeps one canonical risk page and assigns only broad, relevant categories such as ecosystem, technology area, or vulnerability class.