CVE-2025-0111

PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

State: Published
Severity: 7.1 High
Published: Feb 12, 2025
Updated: Feb 26, 2026
Reserved: Dec 20, 2024

Description

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue does not affect Cloud NGFW or Prisma Access software.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Red	palo_alto
4.0	5.9 Medium	CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber	palo_alto

Weaknesses

CWE-73 External Control of File Name or Path

Affected Products

Product	Versions
Cloud NGFWPalo Alto Networks	AllNot affected
PAN-OSPalo Alto Networks	10.1.0 to before 10.1.14-h9Affectedfrom 10.1.14-h9Not affected 10.2.0 to before 10.2.7-h24Affectedfrom 10.2.7-h24Not affectedfrom 10.2.8-h21Not affectedfrom 10.2.9-h21Not affectedfrom 10.2.12-h6Not affectedfrom 10.2.13-h3Not affectedfrom 10.2.10-h14Not affectedfrom 10.2.11-h12Not affected 11.1.0 to before 11.1.6-h1Affectedfrom 11.1.6-h1Not affectedfrom 11.1.2-h18Not affected 11.2.0 to before 11.2.4-h4Affectedfrom 11.2.4-h4Not affected
Prisma AccessPalo Alto Networks	AllNot affected

References

https://security.paloaltonetworks.com/CVE-2025-0111vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0111government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.