A command injection flaw exists in the Junos OS command‑line interface for the ‘request csds’ command, which does not properly sanitize user input. The flaw enables a local attacker who already has limited access to the device to inject arbitrary operating‑system commands. Successful exploitation elevates the attacker’s privileges to root, allowing full compromise of the device and modification of its configuration or state.

Juniper Networks Junos OS versions before 24.4R2‑S4, before 25.2R2‑S1, and before 25.4R1‑S3 are affected. Releases 24.4R1 and earlier are not vulnerable; the issue is fixed in the releases listed in the official solution (24.4R2‑S4, 25.2R2‑S1, 25.4R1‑S3, 26.2R1 and later).

The CVSS score of 8.5 indicates high severity, and the vulnerability allows local command execution with root privileges. The EPSS score of 0.00659 indicates a very low but non‑zero exploitation probability. The lack of listing in CISA’s KEV catalog does not mitigate the risk, as the flaw can be abused when the device is reachable through its CLI or when an attacker gains local access. The attack vector is inferred to be local, requiring the attacker to authenticate to the device via CLI. Given the potential for complete system takeover, the risk to network infrastructure is significant.