02-19-2026 12:45 AM
I am currently experiencing an issue while attempting to upgrade agents in the Cortex XDR console. The upgrade process fails with the following error message:
"Windows Installer DB: Current agent installation is missing."
I attempted to clean the endpoint; however, the process was unsuccessful.
I would like to ask if there is any alternative method to repair or upgrade the agent without performing a full removal.
02-19-2026 03:46 AM
Hello!
The error “Windows Installer DB: Current agent installation is missing” means the Cortex XDR agent’s MSI record is gone, so upgrades can’t proceed. Since the installer can’t repair without that record, the only reliable fix is a clean reinstall—either by using Palo Alto’s cleanup tool or a scripted reinstaller to remove remnants and then install the latest agent. In practice, there isn’t an alternative repair path without removal, so automating the reinstall across endpoints is the best way to resolve it.
02-19-2026 05:45 AM
Hello @A.Gurbanli858186 ,
Greetings for the day.
The error message Windows Installer DB: Current agent installation is missing (often appearing in logs as Current agent registration is missing) indicates a corrupted Microsoft Windows Installer (MSI) database on the endpoint.
Because the Windows OS no longer recognizes the Cortex XDR agent as an installed product, it cannot perform a standard in-place upgrade.
Currently, we do not have a method to repair the Windows MSI database itself.
If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".
Thanks & Regards,
S. Subashkar Sekar
02-19-2026 05:50 AM
Greatings!
Okay i understand the case. But is there any other way to delete the corrupted msi pack and reinstall new version from scratch? because right now i cannot delete the xdr agent. i have thied to reconnect it to my server and actually it connected bt i was unable to delete it nor upgrade it
02-19-2026 07:33 AM
sometimes this erro appear when someone delete the installation package on tenant.
and you need support team give you a XDR_removaltool to run on endpoiint.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
