CVE-2026-0303

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Affected

Palo Alto Networks · Checkov by Prisma Cloud

CVSS v4.0 PALOALTONETWORKS

2.4 LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS

0.19% chance of exploitation in the next 30 days, 8th percentile

Published

2026-09-10

Proof-of-concept exploits (1)

• YonLiud/CVE-2026-0303/blob/2f0896a1c9e880bf5d3956dcef145989c462cfaa/exploit/external-chec…0★ · 2026-09-10

References

• CVE Record
• NVD entry

Related

• CVE-2017-7494
• CVE-2026-19632
• CVE-2026-76904