CVE-2026-33793: CWE-250: Execution with Unnecessary Privileges in Juniper Networks Junos OS
An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system. When a configuration that allows unsigned Python op scripts is present on the device, a non-root user is able to execute malicious op scripts as a root-equivalent user, leading to privilege escalation. This issue affects Junos OS: * All versions before 22.4R3-S7, * from 23.2 before 23.2R2-S4, * from 23.4 before 23.4R2-S6, * from 24.2 before 24.2R1-S2, 24.2R2, * from 24.4 before 24.4R1-S2, 24.4R2; Junos OS Evolved: * All versions before 22.4R3-S7-EVO, * from 23.2 before 23.2R2-S4-EVO, * from 23.4 before 23.4R2-S6-EVO, * from 24.2 before 24.2R2-EVO, * from 24.4 before 24.4R1-S1-EVO, 24.4R2-EVO.
AI Analysis
Technical Summary
This vulnerability (CWE-250) in Juniper Networks Junos OS and Junos OS Evolved arises from execution with unnecessary privileges in the User Interface. When a configuration allows unsigned Python operational scripts, a local user with low privileges can execute malicious scripts as root, leading to privilege escalation. Affected versions include all releases before 22.4R3-S7 and certain versions in the 23.x and 24.x series prior to specified patch releases. The CVSS 3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch links are provided, and no known exploits are reported.
Potential Impact
Successful exploitation allows a local attacker with low privileges to gain root-level access on the affected Junos OS device. This compromises system confidentiality, integrity, and availability, potentially allowing full control over the device. The vulnerability requires local access and a specific configuration that permits unsigned Python operational scripts.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid configurations that allow unsigned Python operational scripts to run. Restrict local user access to trusted personnel only and monitor for unauthorized script execution. Follow Juniper Networks' official communications for updates on patches or mitigations.
CVE-2026-33793: CWE-250: Execution with Unnecessary Privileges in Juniper Networks Junos OS
Description
An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system. When a configuration that allows unsigned Python op scripts is present on the device, a non-root user is able to execute malicious op scripts as a root-equivalent user, leading to privilege escalation. This issue affects Junos OS: * All versions before 22.4R3-S7, * from 23.2 before 23.2R2-S4, * from 23.4 before 23.4R2-S6, * from 24.2 before 24.2R1-S2, 24.2R2, * from 24.4 before 24.4R1-S2, 24.4R2; Junos OS Evolved: * All versions before 22.4R3-S7-EVO, * from 23.2 before 23.2R2-S4-EVO, * from 23.4 before 23.4R2-S6-EVO, * from 24.2 before 24.2R2-EVO, * from 24.4 before 24.4R1-S1-EVO, 24.4R2-EVO.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-250) in Juniper Networks Junos OS and Junos OS Evolved arises from execution with unnecessary privileges in the User Interface. When a configuration allows unsigned Python operational scripts, a local user with low privileges can execute malicious scripts as root, leading to privilege escalation. Affected versions include all releases before 22.4R3-S7 and certain versions in the 23.x and 24.x series prior to specified patch releases. The CVSS 3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch links are provided, and no known exploits are reported.
Potential Impact
Successful exploitation allows a local attacker with low privileges to gain root-level access on the affected Junos OS device. This compromises system confidentiality, integrity, and availability, potentially allowing full control over the device. The vulnerability requires local access and a specific configuration that permits unsigned Python operational scripts.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid configurations that allow unsigned Python operational scripts to run. Restrict local user access to trusted personnel only and monitor for unauthorized script execution. Follow Juniper Networks' official communications for updates on patches or mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-03-23T19:46:13.672Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d843751cc7ad14da3fb559
Added to database: 4/10/2026, 12:25:25 AM
Last enriched: 4/17/2026, 11:11:26 AM
Last updated: 5/25/2026, 12:20:51 PM
Views: 88
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.