This vulnerability is an externally‑controlled format string flaw in the jti‑dialoutd daemon of Juniper Networks Junos OS Evolved. An attacker with authenticated network access can craft a malicious analytics sensor resource and submit it through the gNMI listener, causing the telemetry dial‑out daemon to crash and remain unavailable. The flaw results in a persistent denial of service for telemetry services without exposing data or code execution.

Juniper Networks Junos OS Evolved is impacted. The vulnerability affects the following releases: 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO and all later releases, along with specific respins for versions 23.2‑EVO, 23.4‑EVO, and 24.2‑EVO.

The CVSS score of 8.8 indicates severe risk, and the very low EPSS score of <1% does not lessen the overall danger because the severity remains high. Successful exploitation requires authenticated access but otherwise poses no confidentiality or integrity threat. The attacker can permanently disrupt telemetry by triggering repeated crashes of the dial‑out daemon. No workarounds exist, so updating to the patched releases is the only definitive mitigation.