The vulnerability is a reachable assertion flaw in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An authenticated network-based attacker can cause a denial of service by sending specific BGP‑LS routing updates that trigger the assertion failure, resulting in the rpd process termination.

Affected platforms are Juniper Networks Junos OS and Junos OS Evolved. The vulnerability applies to a wide range of releases: Junos OS 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and all subsequent releases.; and Junos OS Evolved 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO and all subsequent revisions.

The CVSS score of 8.7 indicates a high severity. The EPSS score (<1%) suggests a low current exploitation likelihood. The vulnerability is not listed in CISA KEV. Exploitation requires an authenticated session on the network; the attacker can trigger the assertion failure by crafting BGP‑LS route updates, causing the rpd process to terminate and potentially interrupt routing services.