Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1 Security Distributed Service authorization

Summaryinfo

A vulnerability has been found in Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1 and classified as critical. This impacts an unknown function of the component Security Distributed Service. This manipulation causes authorization. This vulnerability is registered as CVE-2026-33785. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1. It has been declared as critical. Affected by this vulnerability is an unknown part of the component Security Distributed Service. The manipulation with an unknown input leads to a authorization vulnerability. The CWE definition for the vulnerability is CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX. This issue affects Junos OS on MX Series: * 24.4 releases before 24.4R2-S3,  * 25.2 releases before 25.2R2. This issue does not affect Junos OS releases before 24.4.

It is possible to read the advisory at kb.juniper.net. This vulnerability is known as CVE-2026-33785 since 03/23/2026. The exploitation appears to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/13/2026).

The vulnerability scanner Nessus provides a plugin with the ID 305592 (Juniper Junos OS Vulnerability (JSA107872)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 24.4R1, 24.4R2-S3 or 25.2R2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (305592). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

Version

• 24.4R0
• 24.4R2-S2
• 25.2R1

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion