The vulnerability is a local privilege escalation flaw in the CLI of Cisco IOS XR software that permits an authenticated low‑privileged user to execute arbitrary commands as root on the device's underlying operating system. It arises from insufficient validation of user‑supplied arguments to certain CLI commands, as described in the vendor advisory. Successful exploitation allows full root access, compromising confidentiality, integrity, and availability of the device.

Affected products include Cisco IOS XR software. Specific version information was not disclosed in the provided data; therefore administrators should refer to Cisco's security advisory for a full list of vulnerable releases. All installations of Cisco IOS XR exposed to the vulnerable CLI commands are potentially impacted.

The CVSS score of 8.8 indicates high severity, while the EPSS score is under 1 %, suggesting low exploit probability. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local authentication to the device and the ability to crafted CLI commands; no remote code execution or elevated privileges are required beyond the local account. Administrators should assess the presence of low‑privileged accounts and the exposure of the affected CLI commands to gauge risk.