A miscalculation in the routing protocol daemon causes a crash when a remote BGP EVPN neighbor interacts with SRv6 multihoming. The flaw triggers a restart of the rpd process, disrupting routing and potentially taking the device offline until rebooted. This impacts confidentiality only indirectly through availability loss, and the weakness is classified as CWE-682 (Incorrect Resource Management).

The vulnerability affects Juniper Networks Junos OS and Junos OS Evolved. All builds released before Junos OS 25.2R2-S2 or earlier comprise the affected set, while Junos OS Evolved versions prior to 25.2R2-S2-EVO are similarly impacted. Updated releases listed by Juniper eliminate the flaw and should be deployed to secure the environment.

With a CVSS score of 8.7, the issue is considered high severity. The EPSS score is not available, so the calculated likelihood of exploitation cannot be quantified, and the vulnerability is not listed in CISA's KEV catalog. The attack requires a remote BGP EVPN neighbor configured with SRv6 EVPN multihoming; the attacker would need the ability to establish such a neighbor, which is typically scoped to trusted routing peers. Once the error condition is triggered, the rpd process terminates, leading to a temporary loss of routing service.