XDR agent reboot recover everytime

tlmarques — Wed, 26 Aug 2026 14:04:56 GMT

Hi guys,

Recently, we identified several computers running Cortex XDR version 9.2.0.120 with Content Version 2340-38788.

After the machines start, connect to the tenant, and receive the latest content/information, they start rebooting approximately every minute.

The Windows message displayed is:

“You’re about to be signed out”
“Reinício agendado em 1 minuto devido ao recover do cortex”

The machine then restarts after one minute. The message indicates that the restart is being scheduled due to Cortex recovery.

So far, the only solution we have found is to boot the machine into Safe Mode, stop the Cortex XDR services, and then remove/uninstall Cortex XDR.

After that, we reboot the machine, reinstall Cortex XDR, and the problem is resolved.

One additional point that may be relevant: most of our PCs are currently running Cortex XDR version 9.3.0.231 with Content Version 2390-40333.

The fact that these affected machines are running 9.2.0.120 / Content 2340-38788 may indicate that they were offline for some time and therefore did not receive the latest Cortex XDR version/content.

However, even if the machines were offline for an extended period, we don't understand why they would enter Recovery Mode after reconnecting and receiving the latest information. Being offline should not, by itself, explain why Cortex would trigger this behavior.

This is very important for us to understand because we have more than 8,000 devices, and I’m concerned that this issue could potentially start affecting a much larger number of machines.

Has anyone experienced this behavior before, particularly with Cortex XDR 9.2.0.120 / Content Version 2340-38788?

Do you know what could trigger the Cortex Recovery mechanism in this scenario, and whether there are any known issues related to upgrading from this older version/content?

Any information about the root cause, known issues, or recommended troubleshooting steps would be greatly appreciated.

Thanks!

topic XDR agent reboot recover everytime in Cortex XDR Discussions

XDR agent reboot recover everytime