Palo Alto Networks Prisma Access Browser (PAB) - Extracting secrets via Chromium sub-process memory dumps

CVE ID

CVE-2025-4618

Description

Sensitive data was recoverable from PAB sub-process memory by a local user through memory dumps.

Tested Versions

131.109.2963.1

Details

Palo Alto Networks Prisma Access Browser (PAB) is an enterprise browser which emerged as a critical security control for organisations seeking to protect sensitive data and enforce security policies in cloud-first environments.

Timeline

  • 2024-12-30 - Vendor Disclosure
  • 2025-06-11 - Vendor Patched
  • 2025-11-14 - Public Release

Credit

Discovered by Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group.