A flaw in the AccessManager component of Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config‑write privileges to supply a specially crafted field that is not properly neutralised before being incorporated into an OS command. This OS Command Injection vulnerability can be leveraged to execute arbitrary shell commands as the root user within the YANG configuration environment, effectively granting full system control to the attacker. The weakness falls under CWE‑78, reflecting improper sanitisation of external input used in command execution.

Juniper Networks Session Smart Router and Juniper Networks Session Smart Conductor are impacted. All releases before 7.0.5, 7.1.7, and 7.2.3 respectively are vulnerable, while those releases and later versions contain the fix.

The CVSS score of 8.8 indicates a high severity event. The EPSS score is not available, so the estimated exploitation probability remains unknown; however, the vulnerability is listed as not present in the CISA KEV catalog, suggesting no confirmed exploits at the time of reporting. The attack path requires an attacker to have the ability to write configuration changes, thus the risk is mitigated by limiting such privileges. If an attacker can gain config‑write access, they can trigger arbitrary root command execution, leading to complete compromise of the affected device.