The vulnerability is a reachable assertion failure in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. When RSVP‑TE signals an associated‑bidirectional LSP, the assertion condition can be violated, causing the rpd thread to terminate. This results in loss of routing process functionality and potential routing instability for the affected device. The weakness is identified as CWE‑617 (Reachable Assertion).

The issue impacts Juniper Networks Junos OS and Juniper Networks Junos OS Evolved. Systems running release versions prior to the updated patches (23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and the corresponding Junos OS Evolved releases) remain vulnerable.

The CVSS base score of 7.1 indicates a high severity. EPSS information is not available, so the current exploitation probability is unknown, but the vulnerability is exploitable by an adjacent attacker that can exchange RSVP‑TE LSPs with the target. The trickle of assertion failures is deterministic when the specific LSP signalling is performed, meaning exploitation requires only local or near‑neighbor network access. The vulnerability is not listed in CISA KEV, suggesting no known public exploits at this time.