CVE-2025-0106

Summary

A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksCloud NGFWAllunaffected
Palo Alto NetworksExpedition1 < 1.2.101affected
Palo Alto NetworksPanoramaAllunaffected
Palo Alto NetworksPAN-OSAllunaffected
Palo Alto NetworksPrisma AccessAllunaffected

Weaknesses

  • CWE-155: CWE-155 Improper Neutralization of Wildcards or Matching Symbols

Workarounds

Ensure that all network access to Expedition is restricted to only authorized users, hosts, and networks. If you are not actively using Expedition, make sure that your Expedition software is shut down.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References