An OS Command Injection flaw exists in the SonicWall Network Security Manager (NSM) on‑prem. The vulnerability allows a remote attacker who has already authenticated to the system to pass crafted input that is not properly neutralized into an operating‑system command line. If successful, the attacker can execute arbitrary OS commands, compromising the confidentiality, integrity, and availability of the device. The weakness is an improper neutralization of special elements used in an OS command and is classified under CWE‑78.

The affected product is SonicWall Network Security Manager (NSM) on‑prem. No specific version numbers are listed in the advisory, so all current releases of this product are potentially vulnerable until a patch is applied.

Because the feature requires prior authentication, an attacker must first gain valid credentials to exploit the flaw. The absence of an EPSS score and lack of a KEV listing makes it difficult to quantify current exploit prevalence, but the potential for remote code execution implies a high severity. The vulnerability does not rely on privileged local access; any authenticated user could leverage the flaw. The risk level is therefore significant, especially for environments where NSM is exposed to untrusted networks.