CVE-2025-4235 | Palo Alto User-ID Credential Agent up to 11.0.2-132 on Windows Legacy Feature exposure of sensitive system information to an unauthorized control sphere

A vulnerability was found in Palo Alto User-ID Credential Agent up to 11.0.2-132 on Windows. It has been declared as problematic. This affects an unknown part of the component Legacy Feature. Such manipulation leads to exposure of sensitive system information to an unauthorized control sphere.

This vulnerability is listed as CVE-2025-4235. The attack must be carried out locally. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More