CVE-2026-102079: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection

In short

A local attacker with a low-privileged account can exploit an OS command injection flaw in the Junos OS CLI. By crafting a specific 'request csds' command with unsanitized input, the attacker triggers unintended command execution with root privileges. This allows the attacker to take complete control of the device, leading to unauthorized system access or modification.

Written by a language model from the vendor's description. Versions, fixes and exploitation status on this page come straight from the vendor and CISA.

The vendor's description

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.

A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended command execution with root privileges, which can lead to unauthorized system access or modification.

This issue affects Junos OS:

• 24.4 versions before 24.4R2-S4;
• 25.2 versions before 25.2R2-S1;
• 25.4 versions before 25.4R1-S3;

This issue does not affect Junos OS releases before 24.4R1.

Workarounds

Utilize CLI authorization to disallow execution of the 'request csds' commands. Use access lists or firewall filters to limit access to the CLI only from trusted hosts and administrators.

Exploitation

Juniper SIRT is not aware of any malicious exploitation of this vulnerability.