Vulnerability · Published Sep 10, 2026 · Assigned by palo_alto
CVE-2026-0302Checkov by Prisma Cloud: OS Command Injection Vulnerability
Low 1.1
In plain English
A low-severity OS command injection in Checkov by Prisma Cloud from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 4.0)1.1Low
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud | 3.2.0 – before 3.2.502 |
Weakness: CWE-78 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber
References
- https://security.paloaltonetworks.com/CVE-2026-0302 vendor-advisory