PT-2025-16001 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Bartosz Chałek + 1 · Published 2025-04-10 · Updated 2025-04-15 · CVE-2025-0119

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM (affected versions not specified)

Description: A command injection issue in the Palo Alto Networks Cortex XDR Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-09212

CVE-2025-0119

Affected Products

Palo Alto Networks Cortex Xdr Broker Vm

References · 10

• https://security.paloaltonetworks.com/CVE-2025-0119 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09212 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0119 · Security Note
• https://t.me/cvetracker/21454 · Telegram Post
• https://twitter.com/autumn_good_35/status/1911981794364441024 · Twitter Post
• https://twitter.com/CVEnew/status/1910773215401824388 · Twitter Post
• https://twitter.com/CCBalert/status/1911768187546329431 · Twitter Post
• https://t.me/cvedetector/22784 · Telegram Post
• https://t.me/cvenotify/118931 · Telegram Post
• https://reddit.com/r/paloaltonetworks/comments/1jw09bo/new_palo_alto_networks_security_advisories_for · Reddit Post