This vulnerability in Tenable Sensor Proxy enables remote code execution with elevated privileges by exploiting an operator's action of connecting the sensor to an attacker-controlled host. The issue is classified under CWE-94, indicating improper control of code generation or execution. The CVSS v3.1 score is 9.6 (critical), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided, and no known exploits are reported in the wild as of the publication date.

Successful exploitation allows a remote attacker to execute arbitrary code with elevated privileges on the Sensor Proxy system, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system. The attack requires user interaction (an operator connecting to a malicious host), but no prior privileges are needed. The scope of the impact extends beyond the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, operators should avoid connecting the Sensor Proxy to untrusted or attacker-controlled hosts to prevent exploitation.