This vulnerability arises from the Junos OS User Interface allowing execution of unsigned Python operational scripts with root-equivalent privileges when such configuration is enabled. A local attacker with low privileges can exploit this to escalate to root, compromising the system. Affected versions include all releases before 22.4R3-S7 and certain versions in the 23.x and 24.x release series, including Junos OS Evolved variants. The CVSS vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in a local low-privileged user gaining root privileges on the affected Junos OS device, leading to full system compromise. This can impact confidentiality, integrity, and availability of the device and its managed network functions. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid configurations that allow execution of unsigned Python operational scripts. Restrict local user access to trusted personnel only. Monitor Juniper Networks advisories for updates and apply patches promptly once released.