CVE-2025-0111

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the

nobody

user. This issue does not affect Cloud NGFW or Prisma Access software. The vulnerability is actively exploited in attacks.

Recommendations As a temporary workaround, consider restricting access to the management web interface to only trusted internal IP addresses according to the recommended best practices deployment guidelines. At the moment, there is no information about a newer version that contains a fix for this vulnerability.