PT-2025-1075 · Palo Alto Networks · Palo Alto Networks Expedition

Published 2025-01-08 · Updated 2026-01-23 · CVE-2025-0106

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Green

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition (affected versions not specified)

Description The issue is related to a wildcard expansion vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to enumerate files on the host filesystem, potentially compromising the integrity of protected information. The vulnerability can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Neutralization of Wildcards

Weakness Enumeration

CWE-155

Related Identifiers

BDU:2025-00310

CVE-2025-0106

Affected Products

Palo Alto Networks Expedition

References · 10

• https://security.paloaltonetworks.com/PAN-SA-2025-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0106 · Security Note
• https://bdu.fstec.ru/vul/2025-00310 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0106 · Vendor Advisory
• https://t.me/cvedetector/15023 · Telegram Post
• https://reddit.com/r/PaloConfigs/comments/1i035g1/mitigating_cve20250001_why_its_time_to_transition · Reddit Post
• https://t.me/cveNotify/149761 · Telegram Post
• https://twitter.com/CVEnew/status/1877921982022299930 · Twitter Post
• https://twitter.com/johndjohnson/status/1877780230917456050 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1877999366050349307 · Twitter Post