Palo Alto Cortex XSOAR OS Command Injection Flaw CVE-2026-0313

Palo Alto Networks has disclosed a medium-severity OS command injection vulnerability in its Cortex XSOAR and Cortex XSIAM platforms. The flaw, tracked as CVE-2026-0313, permits authenticated administrators to execute arbitrary operating system commands on remote endpoints.

What happened

The vulnerability resides within the OS Query content pack for Cortex XSOAR and Cortex XSIAM. According to the Palo Alto Networks PSIRT advisory, this issue is present in versions 1.0.0 through 1.0.16. The bug enables improper neutralisation of special elements used in an OS command, classified under CWE-78.

To exploit this, an attacker must already possess administrator credentials on the security orchestration platform. The vulnerability specifically leverages the interaction between the OS Query pack and the SSH integration. Palo Alto Networks states it is not aware of any malicious exploitation of this issue in the wild. The vendor assigns a base CVSS score of 8.6, though the attacker vector requires high privilege.

Why it matters

Security orchestration platforms often hold privileged access to numerous network endpoints. A command injection flaw in such a centralised tool can amplify an attacker’s reach significantly. As Packet Tribune reported on OpenSpug vulnerabilities recently, unpatched command injection flaws in management tools pose severe risks.

Here, the requirement for admin access limits the initial attack surface but increases the impact of successful compromise. Environments relying on automated queries via SSH are directly exposed until patched. The moderate urgency suggested by the vendor reflects the privilege requirement. However, the potential for lateral movement from a compromised SOAR platform remains high for defenders.

Next steps

• Update the OS Query content pack to version 1.0.17 or later from the Cortex Marketplace.
• Disable the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM if immediate updates are not possible.
• Audit administrator accounts for unusual query patterns or SSH session initiations from the platform.
• Review SSH integration configurations to ensure they adhere to least-privilege principles.

Detection notes

Teams should monitor for unexpected operating system processes spawning from the security orchestration server. Check logs for SSH connections initiated by the service account used for the OS Query integration. Look for commands that deviate from standard query syntax or include shell metacharacters. Alert on any execution of binary files or scripts from temporary directories on remote endpoints. Verify that all administrative actions are authorised and correspond to documented operational procedures. Isolate affected endpoints if anomalous command execution is confirmed to prevent further lateral movement.

What to do and how to stay safe: Palo Alto Networks

• Verify your current version of the OS Query content pack against the vulnerable range.
• Apply the vendor’s update to version 1.0.17 as soon as maintenance windows allow.
• If patching is delayed, disable the specific automation rule mentioned in the advisory.
• Monitor authentication logs for any new or unusual administrative sessions on the platform.

Step-by-step guide: Emergency Patching: How to Fix Critical Flaws Without Breaking Production

General security guidance from the Packet Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which versions of Cortex XSOAR are affected by CVE-2026-0313?

Versions 1.0.0 up to but excluding 1.0.17 of the OS Query content pack are vulnerable.

Is there a known exploit for this vulnerability?

Palo Alto Networks states it is not aware of any malicious exploitation of this issue.

What is the CVSS score for this flaw?

The vendor lists a CVSS-B score of 8.6 and a CVSS-BT score of 6.1.