Skip to content
OpenAdvisories
High · 7.3 CVE-2026-21916 EUVD-2026-21080GHSA-x5g9-73r3-vh5h

Junos OS: A low privileged user can escalate their privileges so that they can login as root

Published Apr 9, 2026 · Updated Apr 13, 2026 · Assigned by juniper

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system.

When after a user has performed a specific 'file link ...' CLI operation, another user commits (unrelated configuration changes), the first user can login as root.

This issue affects Junos OS:
* all versions before 23.2R2-S7,
* 23.4 versions before 23.4R2-S6,
* 24.2 versions before 24.2R2-S3,
* 24.4 versions before 24.4R2-S2,
* 25.2 versions before 25.2R2.

This issue does not affect versions 25.4R1 or later.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7, 23.4 – < 23.4R2-S6, 24.2 – < 24.2R2-S3, 24.4 – < 24.4R2-S2, 25.2 – < 25.2R2 23.2R2-S7

Advisories 1

References