{"id":"CVE-2026-0303","title":"A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.","summary":"A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.","severity":"low","cvss":2.4,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","cwe":["CWE-829"],"vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","affected":["checkov_by_prisma_cloud >= 3.2.0 < 3.2.532"],"published":"2026-09-10","updated":"2026-09-10","sourceUpdated":"2026-09-10T14:50:07.813","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0303","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0303","label":"psirt@paloaltonetworks.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T13:01:15.631812Z"},"cvssSource":"cna","ingestedAt":"2026-09-14T13:55:31.118Z","epss":0.00128,"epssPercentile":0.02854,"exploits":{"github":1,"githubRepos":["https://github.com/YonLiud/CVE-2026-0303"],"checkedAt":"2026-09-21T15:27:49.644Z"},"exploitAvailable":true,"slug":"CVE-2026-0303","body":"## Overview\n\nA code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":25,"depthScoreParts":{"impact":13.2,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202706,"id":"CVE-2026-0303","ts":1789402493725,"field":"exploit_available","old":"false","new":"true"},{"seq":66496,"id":"CVE-2026-0303","ts":1789096092758,"field":"exploit_available","old":"false","new":"true"}]}