An incomplete cleanup flaw in the routing daemon of Junos OS and Junos OS Evolved causes the process to crash when a BGP MVPN update is processed. The vulnerability is triggered by a configured MVPN neighbor using inter‑region segmented VRFs with the 'protocols mvpn inter-region-template' directive, resulting in a service interruption of the router’s routing functionality.

Juniper Networks Junos OS and Junos OS Evolved routers running releases 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and all subsequent releases, as well as the corresponding Junos OS Evolved releases (23.2R2‑S7.7‑EVO through 26.4R1‑EVO). No work‑arounds are available, so affected devices must rely on the vendor patch or configuration changes.

The flaw carries a high CVSS score of 8.7, indicating a substantial impact on availability. The EPSS score is not available, so current exploitation likelihood is uncertain, but the vulnerability is listed in the vendor advisory and not in the CISA KEV catalog. An attacker who can inject a malicious BGP MVPN update from a configured neighbor can provoke a routing‑daemon crash, leading to loss of network reachability for that router and potential cascading outages in the BGP fabric.