CVE-2025-0111

Summary

CVE-2025-0111 is an authenticated file read vulnerability affecting Palo Alto Networks PAN-OS software. An attacker with network access to the management web interface can read files on the PAN-OS filesystem that have "nobody" user permissions. To minimize the risk, it is recommended to restrict access to the management web interface solely to trusted internal IP addresses, as outlined in Palo Alto's best practices deployment guidelines. This vulnerability does not affect Cloud NGFW or Prisma Access software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.