Loading vulnerability…
Root-privileged arbitrary file overwrite in Juniper Session Smart Router and Conductor
CVE-2026-103401 is an improper link resolution before file access vulnerability in the unauthenticated web server handlers of Juniper Networks Session Smart Router and Session Smart Conductor. A local unprivileged user can exploit link following through unauthenticated API endpoints to overwrite arbitrary files with root privileges. Affected releases precede 7.0.5 in the 7.0 branch, 7.1.7 in the 7.1 branch, and 7.2.3 in the 7.2 branch. Exploitation is possible on Mist-managed routers and unmanaged routers that have not been onboarded to a Conductor; routers already managed by Conductor are unaffected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
An attacker can overwrite arbitrary files with root privileges, compromising system integrity and potentially enabling privilege escalation, system compromise, or service disruption. The resulting impact depends on the files overwritten.
If you can’t patch tonight, do this now.
No explicit workaround is documented. Routers already managed by Conductor are not affected; Mist management does not remove exposure.
Patch, then assume compromise.
Upgrade affected Session Smart Router and Session Smart Conductor installations to 7.0.5 or later in the 7.0 branch, 7.1.7 or later in the 7.1 branch, or 7.2.3 or later in the 7.2 branch, following Juniper advisory JSA112183.
No public exploits tracked yet. Mallory keeps watching.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.