CVE-2025-0127

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

• CWE-78

• https://security.paloaltonetworks.com/CVE-2025-0127

Published

Apr 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0121A null pointer dereference vulnerability in the Palo Alto Ne…6.8
• CVE-2025-0122A denial-of-service (DoS) vulnerability in Palo Alto Network…5.1
• CVE-2025-0123A vulnerability in the Palo Alto Networks PAN-OS® software e…5.9
• CVE-2025-0124An authenticated file deletion vulnerability in the Palo Alt…3.8
• CVE-2025-0125An improper input neutralization vulnerability in the manage…6.9
• CVE-2025-0126When configured using SAML, a session fixation vulnerability…8.3
• CVE-2025-0128A denial-of-service (DoS) vulnerability in the Simple Certif…8.7
• CVE-2025-0129An improper exception check in Palo Alto Networks Prisma Acc…9.3
• CVE-2025-0130A missing exception check in Palo Alto Networks PAN-OS® soft…7.5
• CVE-2025-0131An incorrect privilege management vulnerability in the OPSWA…7.1
• CVE-2025-0132A missing authentication vulnerability in Palo Alto Networks…6.9
• CVE-2025-0133A reflected cross-site scripting (XSS) vulnerability in the …2.7