This vulnerability is a reachable assertion in the rpd process of Juniper Networks Junos OS and Junos OS Evolved that allows an adjacent attacker to trigger a crash when LDP control traffic is processed. The flaw is a form of improper input validation (CWE‑617). When exploited, the rpd daemon terminates, leading to a denial of service that prevents traffic routing until the process restarts.

Affected vendors include Juniper Networks. The vulnerability impacts Junos OS versions 23.2R2‑S7.7 through 26.4R1 and all later releases, and Junos OS Evolved versions 23.2R2‑S7.7‑EVO through 26.4R1‑EVO and subsequent releases. The advisory lists many specific builds that have the update applied; devices running versions prior to these releases are at risk.

The CVSS score is 7.1, indicating a high severity denial of service. No EPSS score is available, but the advisory notes no known workarounds and the attack requires an adjacent unauthenticated host that can send LDP control packets. The vulnerability is not listed in the CISA KEV catalog, suggesting no known large‑scale exploit activity, yet the impact can be critical in a routing environment.