CVE-2026-102079
7.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-78
Impact
A low-privileged local user can gain root access and take complete control of the device. The attacker needs an existing local CLI account to execute the vulnerable command.
Root cause
The Junos OS CLI fails to sanitize input in the 'request csds' command, allowing arbitrary command execution.
Affected systems
Juniper Networks Junos OS 24.4 versions before 24.4R2-S4, 25.2 versions before 25.2R2-S1, and 25.4 versions before 25.4R1-S3 (releases prior to 24.4R1 are unaffected)
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to version 24.4R2-S4, 25.2R2-S1, 25.4R1-S3, or later. Restrict untrusted local user access to the CLI until updated.
$ show versionAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended command execution with root privileges, which can lead to unauthorized system access or modification. This issue affects Junos OS: * 24.4 versions before 24.4R2-S4; * 25.2 versions before 25.2R2-S1; * 25.4 versions before 25.4R1-S3; This issue does not affect Junos OS releases before 24.4R1.