Description
An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.
This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Session Smart Router | < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 | 7.0.5 |
| Juniper Networks | Session Smart Conductor | < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 | 7.0.5 |
Advisories 2
- NCSC-2026-0462 Kwetsbaarheden verholpen in Juniper Networks Session Smart Router en Session Smart Conductor NCSC-NL (Netherlands) · Oct 30, 2026
- WID-SEC-2026-4234 Juniper Session Smart Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 28, 2026
References
- https://supportportal.juniper.net/JSA112183 vendor-advisory