---
id: CVE-2025-4617
title: >-
  An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma®
  Browser on Windows allows a locally authenticated non-admin user to bypass the
  screenshot control feature of the browser.



  Browser self-protection should be …
summary: >-
  An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma®
  Browser on Windows allows a locally authenticated non-admin user to bypass the
  screenshot control feature of the browser.



  Browser self-protection should be …
severity: none
cwe:
  - CWE-424
published: '2025-11-14'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T23:10:00.237'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-4617'
references:
  - url: 'https://security.paloaltonetworks.com/CVE-2025-4617'
    label: psirt@paloaltonetworks.com
tags:
  - nvd
epss: 0.00131
epssPercentile: 0.02276
ingestedAt: '2026-09-30T23:29:32.469Z'
---

## Overview

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser.


Browser self-protection should be enabled to mitigate this issue.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.