An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.