PALO ALTO: Security Advisory: Multiple DLP Policy Bypass Vulnerabilities in Prisma Access Agent on Windows — Severity MEDIUM

PALO ALTO Security Advisory

Published Date: July 8, 2026

CVE: CVE-2026-0278

Advisory Summary

Palo Alto Networks has disclosed multiple Data Loss Prevention (DLP) policy bypass vulnerabilities affecting their Prisma Access Agent on Windows platforms. These vulnerabilities could potentially allow unauthorized circumvention of data protection rules, increasing the risk of sensitive data exposure.

Impact & Risks:
The affected Prisma Access Agent versions deployed on Windows infrastructure may fail to enforce some DLP policies as intended. This compromises data governance, exposing enterprises to data leakage risks, compliance breaches, and potential regulatory fines.

Mitigation:
Palo Alto Networks recommends all affected customers promptly apply the released security patches to mitigate these medium-severity vulnerabilities. Reviewing and reinforcing existing DLP deployment and monitoring strategies is also advisable to maintain comprehensive data security.

IT infrastructure professionals integrating Palo Alto Networks Prisma Access should prioritize updating their agents and verifying policy enforcement integrity to safeguard enterprise data assets effectively.

🔗

Reference: Vendor Advisory