Vulnerability · Published Aug 13, 2025 · Assigned by palo_alto

CVE-2025-2180Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

Medium 4.8

In plain English

A medium-severity unsafe deserialization in Checkov by Prisma Cloud from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 4.0)4.8Medium

Exploit odds (30 days)0.2%top 90.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	Checkov by Prisma Cloud	3.2.0 – before 3.2.415

Weakness: CWE-502 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber

References

https://security.paloaltonetworks.com/CVE-2025-2180 vendor-advisory