CVE-2025-4614 PAN-OS: Session Token Disclosure Vulnerability
An authenticated administrator can view other users' session tokens, potentially allowing impersonation of those users.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-4614?
CVE-2025-4614 is a medium-severity vulnerability in Paloaltonetworks Pan-Os, published on 9 Oct 2025. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked.
The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.
Cloud NGFW and Prisma® Access are not affected by this vulnerability.
Weakness: CWE-497
Which versions are affected by CVE-2025-4614?
It affects 1 product.
Products include Paloaltonetworks Pan-Os.
How do I fix CVE-2025-4614?
No fix has been published for CVE-2025-4614 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-4614 being exploited?
There is no known exploitation of CVE-2025-4614 in the wild and no public exploit code.
Other vulnerabilities in Paloaltonetworks Pan-Os
- CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass
- CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write
- CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass
Sources
Also known as GHSA-p4fj-c8rg-ggm6.