A vulnerability in the REST API of Cisco Identity Services Engine (ISE) allows an authenticated remote attacker with administrative credentials to upload or copy arbitrary files on the device. This occurs due to insufficient validation of file operations, enabling crafted path uploads. Successful exploitation could lead to arbitrary command execution as root on the affected device. The vulnerability has a high severity score of 7.2 (CVSS 3.1). No affected versions or patch information are provided.