Key points
- Palo Alto Networks rates CVE-2026-0313 as medium severity with moderate urgency.
- The flaw affects the OS Query content pack versions 1.0.0 through 1.0.16.
- No malicious exploitation of this issue has been observed by the vendor.
The short version
- The vulnerability allows authenticated administrators to execute operating system commands on remote endpoints.
- It requires the OS Query content pack and SSH integration to be installed and configured.
- Users can update to version 1.0.17 or disable the specific automation to mitigate risk.
The details
Palo Alto Networks PSIRT published an advisory for CVE-2026-0313, identifying an OS command injection flaw in the Cortex XSOAR and Cortex XSIAM platforms. The issue resides within the OS Query content pack. According to the advisory, an authenticated administrator can exploit this defect to execute arbitrary operating system commands on remote endpoints. The vulnerability is tied to how the pack handles special elements in OS commands, classified under CWE-78.
The flaw is present in versions of the OS Query pack starting from 1.0.0 up to, but not including, version 1.0.17. This affects both the Cortex XSOAR and Cortex XSIAM implementations of the content pack. The vendor assigns a CVSS-BT score of 6.1 and a CVSS-B score of 8.6. Despite the technical severity metrics, Palo Alto Networks rates the overall severity as medium and suggests moderate urgency for remediation.
For the vulnerability to be exploitable, specific conditions must be met. The OS Query content pack must be installed and configured in the environment. Additionally, the SSH integration must also be installed and configured. Without these two components active, the attack vector described in the advisory is not available. Palo Alto Networks states it is not aware of any malicious exploitation of this issue in the wild.
The context
This incident follows a pattern of command injection flaws impacting security and management platforms. As TechSec Headlines reported on October 13, 2026, Adobe Experience Manager faced a critical remote code execution flaw requiring no user interaction. Similarly, on October 12, 2026, researchers noted active exploitation of command injection flaws in AhsayCBS servers. While those cases involved unpatched systems and active abuse, Palo Alto Networks confirms no known exploitation for CVE-2026-0313.
The requirement for an authenticated administrator limits the immediate blast radius compared to unauthenticated remote code execution flaws. However, the ability to run OS commands on remote endpoints poses significant risk if admin credentials are compromised. The medium severity rating reflects the need for authentication and specific configuration prerequisites. Organizations using these platforms for security orchestration and automation should verify their configurations against these requirements.
What to watch
- Monitor the Cortex XSOAR Marketplace for the release of OS Query pack version 1.0.17.
- Check internal logs for unusual OS command executions from the OSQueryBasicQuery automation.
- Review access controls for administrative accounts that have permission to manage integrations.
- Watch for any updates from Palo Alto Networks regarding observed exploitation attempts.
What it means for organisations
Security teams should immediately inventory all instances of Cortex XSOAR and XSIAM to identify where the OS Query pack is deployed. Operations leaders need to assess the risk of disabling the OSQueryBasicQuery automation, as this may impact routine endpoint queries. Procurement and vendor management should confirm that current support contracts cover content pack updates. Incident response plans should be reviewed to ensure they cover scenarios where administrative accounts are compromised to execute commands. Communication should reach all system administrators with access to these platforms.
What to do and how to stay safe: Palo Alto Networks
- Verify if the OS Query content pack and SSH integration are installed in your environment.
- Update the OS Query pack to version 1.0.17 or later from the Cortex XSOAR Marketplace.
- If immediate updating is not possible, disable the OSQueryBasicQuery automation in your platform.
- Restrict administrative access to only those who require it for managing integrations.
Step-by-step guide: Automatic Software Updates: Definition, Mechanics and Hidden Risks
General security guidance from the TechSec Headlines newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which versions of the OS Query pack are vulnerable?
Versions 1.0.0 through 1.0.16 are vulnerable in both Cortex XSOAR and Cortex XSIAM.
Is there any evidence of this flaw being exploited?
No, Palo Alto Networks is not aware of any malicious exploitation of this issue.
What is the CVSS score for this vulnerability?
The CVSS-BT score is 6.1 and the CVSS-B score is 8.6.
