Log in / Sign up

Vulnerability details

CVE-2025-0110

Palo Alto Networks PAN-OS OpenConfig Plugin

PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin

CVSS 4.0
8.6High

Official description

A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands. The commands are run as the “__openconfig” user (which has the Device Administrator role) on the firewall. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

CVSS scores

ScoreVersionSourceVector
8.6High 4.0 CVEProject cvelistV5 (CNA) (palo_alto) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber

Affected products

VendorProductVersionsSource
Palo Alto Networks PAN-OS OpenConfig Plugin 1.0.0 ≤ v < 2.1.2 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-02-13
Last updated
2026-02-26
State
Published
Assigner (CNA)
palo_alto

Exploit prediction (EPSS)

1.27%
Probability of exploitation in 30 days
70%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-78
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')