PT-2025-25360 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Published 2025-06-11 · Updated 2025-06-16 · CVE-2025-4228

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XDR Broker VM (affected versions not specified)

Description An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2025-08771

CVE-2025-4228

Affected Products

Palo Alto Networks Cortex Xdr Broker Vm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-4228 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-4228 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08771 · Security Note
• https://t.me/true_secator/7130 · Telegram Post
• https://twitter.com/CVEnew/status/1933311337188282639 · Twitter Post
• https://t.me/cvetracker/26136 · Telegram Post