GHSA-x5g9-73r3-vh5h

GHSA-x5g9-73r3-vh5h PUBLISHED CVSS 7.300000190734863 HIGH

Record from GitHub Advisory Database · Published April 10, 2026

A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file link ...' CLI operation, another user commits (unrelated configuration changes), the first user can login as root. This issue affects Junos OS: * all versions before 23.2R2-S7, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S3, * 24.4 versions before 24.4R2-S2, * 25.2 versions before 25.2R2. This issue does not affect versions 25.4R1 or later.

Risk scores

CVSS 3.1

7.300000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Timeline

Apr 10, 2026 CVE Published
Apr 11, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-x5g9-73r3-vh5h
vulnetix vdb fixes GHSA-x5g9-73r3-vh5h

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-x5g9-73r3-vh5h/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2026-21916 advisory
https://kb.juniper.net/JSA107807 url

Look up in the Resolve Platform →