Key points
- Palo Alto Networks rates CVE-2026-0313 as medium severity with a CVSS score of 8.6.
- The flaw affects Cortex XSOAR and XSIAM OS Query versions 1.0.0 through 1.0.16.
- Users can update to version 1.0.17 or disable the specific automation to block the risk.
Attackers who gain administrative access to Palo Alto Networks Cortex XSOAR or Cortex XSIAM can now execute arbitrary operating system commands on remote endpoints. This capability stems from a vulnerability in the OS Query content pack, which relies on SSH integration. According to Palo Alto Networks PSIRT, the issue allows full command execution if specific conditions are met.
In plain English
The vulnerability is an OS command injection flaw. It occurs within the OS Query content pack, a tool used for querying systems. If an attacker controls an admin account, they can inject malicious commands into queries sent via SSH. This bypasses standard application boundaries, letting the attacker run code directly on the underlying operating system of the connected endpoints.
The background
Palo Alto Networks published an advisory for CVE-2026-0313, classifying it as medium severity. The vendor is not aware of any active exploitation in the wild. The vulnerability affects versions 1.0.0 up to, but not including, 1.0.17 of the OS Query pack for both XSOAR and XSIAM. This follows a trend of command injection risks, similar to issues seen in other security platforms, as this publication reported on 2026-10-14.
What changes now
The vendor has released version 1.0.17 of the OS Query content pack. Customers are advised to update from the marketplace immediately. Those who cannot upgrade right away can mitigate the risk by disabling the OSQueryBasicQuery automation in their XSOAR or XSIAM instance. This effectively removes the attack vector until a permanent fix is deployed.
The attacker's path
In incidents involving command injection, threat actors typically need prior access to a privileged account. They exploit the weakness by inserting unexpected characters into input fields that are passed to the system shell. This technique serves as an initial foothold or privilege escalation stage, allowing attackers to move laterally or establish persistence. Teams usually monitor for unusual command execution patterns and restrict admin access to reduce exposure to such flaws.
What to do and how to stay safe: Palo Alto Networks
- Check if you have the OS Query content pack installed in Cortex XSOAR or XSIAM.
- Verify the current version and upgrade to 1.0.17 or later from the marketplace.
- If immediate updating is not possible, disable the OSQueryBasicQuery automation feature.
- Audit admin account activity for signs of unusual command execution on remote endpoints.
Step-by-step guide: Emergency Patching: Correcting Five Common Operational Errors
General security guidance from the RedTeam Log newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Is this vulnerability actively being exploited?
Palo Alto Networks states it is not aware of any malicious exploitation of CVE-2026-0313.
Which versions of the OS Query pack are affected?
Versions 1.0.0 through 1.0.16 are vulnerable; 1.0.17 fixes the issue.
Can I mitigate the risk without updating?
Yes, you can disable the OSQueryBasicQuery automation in XSOAR or XSIAM as a temporary measure.
