Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-0980 EUVD-2026-1228GHSA-9hp7-prp8-2mg8

JSON RPC authentication bypass in Nokia SR Linux

Published Jan 7, 2026 · Updated Jan 7, 2026 · Assigned by Nokia

Description

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials.

Affected products

VendorProductAffectedFixed
Nokia SR Linux <23.10.6, <24.10.2 23.10.6 and onwards

References