Key points
- CVE-2026-0313 affects Cortex XSOAR and XSIAM OS Query packs below version 1.0.17.
- An authenticated administrator can execute arbitrary operating system commands on remote endpoints.
- Palo Alto Networks has released an update; disabling the automation is a temporary mitigation.
Palo Alto Networks has confirmed a command injection flaw in its security orchestration platforms. The issue impacts the OS Query content pack for both Cortex XSOAR and Cortex XSIAM, allowing privileged users to run unauthorised system commands.
What happened
The vulnerability, tracked as CVE-2026-0313, stems from improper neutralisation of special elements in OS commands. According to the Palo Alto Networks PSIRT advisory, an authenticated administrator can exploit this flaw to execute arbitrary commands on remote endpoints. This requires the OS Query content pack and the SSH integration to be installed and configured within the platform. The flaw is classified as Medium severity by the vendor, with a CVSS-BT score of 6.1 and a CVSS-B score of 8.6. The company stated it is not aware of any malicious exploitation of this issue in the wild.
Why it matters
This defect affects versions 1.0.0 through 1.0.16 of the OS Query pack for both Cortex XSOAR and Cortex XSIAM. Because the attack vector requires an authenticated administrator, the immediate risk is limited to insider threats or compromised administrative accounts. However, the ability to execute arbitrary OS commands on remote endpoints represents a significant breach of system integrity. Security operations teams must verify their pack versions immediately, as the default configuration may leave the automation active.
What happens next
- Update the Cortex XSOAR or Cortex XSIAM OS Query content pack to version 1.0.17 or later via the Marketplace.
- If an immediate update is not possible, disable the OSQueryBasicQuery automation within the platform settings.
- Audit administrative access to ensure that only authorised personnel have the necessary privileges.
- Monitor system logs for any unexpected command executions originating from the OS Query integration.
Patch priority
Teams usually prioritise systems with the highest exposure to insider threats or compromised credentials. In this scenario, administrators should first identify instances where the OS Query pack is actively used and the SSH integration is enabled. It is advisable to test the update in a non-production environment before rolling it out broadly to ensure stability. Backing up configurations prior to the update helps mitigate potential deployment issues. If a patch cannot be applied immediately, disabling the specific automation reduces the attack surface significantly.
What to do and how to stay safe: Palo Alto Networks
- Verify the current version of the OS Query content pack in your Cortex XSOAR or XSIAM environment.
- Apply the update to version 1.0.17 or later as soon as operationally feasible to close the injection vector.
- Disable the OSQueryBasicQuery automation if you cannot update immediately to prevent exploitation.
- Review administrative logs for any anomalous command executions that may indicate prior abuse.
Step-by-step guide: Patch Management: Definition, Purpose and Operational Reality
General security guidance from the AppSec Scoop newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which specific products are affected by CVE-2026-0313?
The vulnerability affects the OS Query content pack for Palo Alto Networks Cortex XSOAR and Cortex XSIAM.
Is there a fix available for this command injection flaw?
Yes, users should update to version 1.0.17 or later of the OS Query pack from the Cortex XSOAR Marketplace.
Can this vulnerability be exploited by unauthenticated attackers?
No, the advisory states that the issue requires an authenticated administrator to be present.
