nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-0113 CVE-2025-0113
MEDIUM
Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers
Record summary
CVE-2025-0113 has a selected CVSS score of 5.3 (medium).
Description
A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from the host network used by Broker VM. This may allow access to read files sent for analysis and logs transmitted by the Cortex XDR Agent to the Cortex XDR server.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 12, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Cortex XDR Broker VMBrowse Palo Alto Networks / Cortex XDR Broker VMDefault status: unaffected | CVE List | 1.0.0 to < 26.0.116 | affected |
References
3security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2024-0113 security.paloaltonetworks.comVendor advisory
https://security.paloaltonetworks.com/CVE-2025-0113