A fault in the routing protocol daemon creates an infinite loop that never exits when EVPN multihoming uses preference-based designated‑forwarder election. An attacker who can reach the device over the network can trigger the loop, causing the rpd process to consume CPU and memory resources and eventually stop responding. The disruption does not allow direct code execution but can render a router or switch unavailable to the broader network, compromising availability.

Juniper Networks Junos OS and Junos OS Evolved are affected. Versions that contain the vulnerability include Junos OS: 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1, and later releases. Junos OS Evolved: 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO, and later releases.

The vulnerability carries a CVSS score of 8.7, indicating a high severity. The EPSS score is 0.00373, reflecting a very low likelihood of exploitation, and the issue is not listed in CISA’s KEV catalog. Remote network attackers can launch the denial‑of‑service attack with no special access. The infinite‑loop condition (CWE‑835) means the flaw can be triggered repeatedly until resources are exhausted, yielding total loss of routing function for the affected device.