An authenticated user with high privileges can inject custom arguments into protected troubleshooting commands and trigger the execution of arbitrary instructions. The injection ultimately allows the attacker to run commands with the system’s highest privilege level, resulting in full compromise of the device’s operating system. The vulnerability is a classic command‑injection flaw that can be abused to elevate an account’s rights, modify critical configuration, or install persistent backdoors.

Infoblox NIOS, the network services platform that manages DNS, DHCP, and IP address allocation. Any deployment running the affected firmware version is at risk, including on‑premises appliances used in enterprise and data‑center environments.

The CVSS base score of 9.1 classifies the issue as critical. EPSS data is unavailable, but the advisory indicates that the flaw was used to spawn a root shell in maintenance mode, implying a high likelihood of exploitation once authenticated access is obtained. The vulnerability is not listed in CISA’s KEV catalog, so no known public exploit has yet been confirmed. The attack vector requires authenticated access with sufficient privileges to run troubleshooting commands, meaning it is primarily an internal threat that can be exploited by insiders or attackers who have compromised a privileged account.