CVE-2025-59961: Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Published Jan 15, 2026
·
Updated

An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the resource.

This vulnerability allows any low-privileged user logged into the system to connect to the Unix socket and issue commands to manage the DHCP service, in essence, taking administrative control of the local DHCP server or DHCP relay.

This issue affects: Junos OS: all versions before 21.2R3-S10, all versions of 22.2, from 21.4 before 21.4R3-S12, from 22.4 before 22.4R3-S8, from 23.2 before 23.2R2-S5, from 23.4 before 23.4R2-S6, from 24.2 before 24.2R2-S2, from 24.4 before 24.4R2, from 25.2 before 25.2R1-S1, 25.2R2;

Junos OS Evolved: all versions before 22.4R3-S8-EVO, from 23.2 before 23.2R2-S5-EVO, from 23.4 before 23.4R2-S6-EVO, from 24.2 before 24.2R2-S2-EVO, from 24.4 before 24.4R2-EVO, from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.

Affected Software

134 affected components
Juniper Networks Junos OS<21.2R3-S10, =22.2, >undefined, >undefined, >undefined, >undefined, >undefined, >undefined, >undefined, =25.2R2
Juniper Networks Junos OS Evolved<22.4R3-S8-EVO, >undefined, >undefined, >undefined, >undefined, >undefined, =25.2R2-EVO
Juniper Junos<21.2
Juniper Junos=21.2
Juniper Junos=21.2-r1
Juniper Junos=21.2-r1-s1
Juniper Junos=21.2-r1-s2
Juniper Junos=21.2-r2
Juniper Junos=21.2-r2-s1
Juniper Junos=21.2-r2-s2
Juniper Junos=21.2-r3
Juniper Junos=21.2-r3-s1
Juniper Junos=21.2-r3-s2
Juniper Junos=21.2-r3-s3
Juniper Junos=21.2-r3-s4
Juniper Junos=21.2-r3-s5
Juniper Junos=21.2-r3-s6
Juniper Junos=21.2-r3-s7
Juniper Junos=21.2-r3-s8
Juniper Junos=21.2-r3-s9
Juniper Junos=21.4
Juniper Junos=21.4-r1
Juniper Junos=21.4-r1-s1
Juniper Junos=21.4-r1-s2
Juniper Junos=21.4-r2
Juniper Junos=21.4-r2-s1
Juniper Junos=21.4-r2-s2
Juniper Junos=21.4-r3
Juniper Junos=21.4-r3-s1
Juniper Junos=21.4-r3-s10
Juniper Junos=21.4-r3-s11
Juniper Junos=21.4-r3-s2
Juniper Junos=21.4-r3-s3
Juniper Junos=21.4-r3-s4
Juniper Junos=21.4-r3-s5
Juniper Junos=21.4-r3-s6
Juniper Junos=21.4-r3-s7
Juniper Junos=21.4-r3-s8
Juniper Junos=21.4-r3-s9
Juniper Junos=22.2
Juniper Junos=22.4
Juniper Junos=22.4-r1
Juniper Junos=22.4-r1-s1
Juniper Junos=22.4-r1-s2
Juniper Junos=22.4-r2
Juniper Junos=22.4-r2-s1
Juniper Junos=22.4-r2-s2
Juniper Junos=22.4-r3
Juniper Junos=22.4-r3-s1
Juniper Junos=22.4-r3-s2
Juniper Junos=22.4-r3-s3
Juniper Junos=22.4-r3-s4
Juniper Junos=22.4-r3-s5
Juniper Junos=22.4-r3-s6
Juniper Junos=22.4-r3-s7
Juniper Junos=23.2
Juniper Junos=23.2-r1
Juniper Junos=23.2-r1-s1
Juniper Junos=23.2-r1-s2
Juniper Junos=23.2-r2
Juniper Junos=23.2-r2-s1
Juniper Junos=23.2-r2-s2
Juniper Junos=23.2-r2-s3
Juniper Junos=23.2-r2-s4
Juniper Junos=23.4
Juniper Junos=23.4-r1
Juniper Junos=23.4-r1-s1
Juniper Junos=23.4-r1-s2
Juniper Junos=23.4-r2
Juniper Junos=23.4-r2-s1
Juniper Junos=23.4-r2-s2
Juniper Junos=23.4-r2-s3
Juniper Junos=23.4-r2-s4
Juniper Junos=23.4-r2-s5
Juniper Junos=24.2
Juniper Junos=24.2-r1
Juniper Junos=24.2-r1-s1
Juniper Junos=24.2-r1-s2
Juniper Junos=24.2-r2
Juniper Junos=24.2-r2-s1
Juniper Junos=24.4
Juniper Junos=24.4-r1
Juniper Junos=24.4-r1-s2
Juniper Junos=24.4-r1-s3
Juniper Junos=25.2
Juniper Junos=25.2-r1
Juniper Junos=25.2-r2
Juniper Junos OS Evolved<22.4
Juniper Junos OS Evolved=22.4
Juniper Junos OS Evolved=22.4-r1
Juniper Junos OS Evolved=22.4-r1-s1
Juniper Junos OS Evolved=22.4-r1-s2
Juniper Junos OS Evolved=22.4-r2
Juniper Junos OS Evolved=22.4-r2-s1
Juniper Junos OS Evolved=22.4-r2-s2
Juniper Junos OS Evolved=22.4-r3
Juniper Junos OS Evolved=22.4-r3-s1
Juniper Junos OS Evolved=22.4-r3-s2
Juniper Junos OS Evolved=22.4-r3-s3
Juniper Junos OS Evolved=22.4-r3-s4
Juniper Junos OS Evolved=22.4-r3-s5
Juniper Junos OS Evolved=22.4-r3-s6
Juniper Junos OS Evolved=22.4-r3-s7
Juniper Junos OS Evolved=23.2
Juniper Junos OS Evolved=23.2-r1
Juniper Junos OS Evolved=23.2-r1-s1
Juniper Junos OS Evolved=23.2-r1-s2
Juniper Junos OS Evolved=23.2-r2
Juniper Junos OS Evolved=23.2-r2-s1
Juniper Junos OS Evolved=23.2-r2-s2
Juniper Junos OS Evolved=23.2-r2-s3
Juniper Junos OS Evolved=23.2-r2-s4
Juniper Junos OS Evolved=23.4
Juniper Junos OS Evolved=23.4-r1
Juniper Junos OS Evolved=23.4-r1-s1
Juniper Junos OS Evolved=23.4-r1-s2
Juniper Junos OS Evolved=23.4-r2
Juniper Junos OS Evolved=23.4-r2-s1
Juniper Junos OS Evolved=23.4-r2-s2
Juniper Junos OS Evolved=23.4-r2-s3
Juniper Junos OS Evolved=23.4-r2-s4
Juniper Junos OS Evolved=23.4-r2-s5
Juniper Junos OS Evolved=24.2
Juniper Junos OS Evolved=24.2-r1
Juniper Junos OS Evolved=24.2-r1-s2
Juniper Junos OS Evolved=24.2-r2
Juniper Junos OS Evolved=24.2-r2-s1
Juniper Junos OS Evolved=24.4
Juniper Junos OS Evolved=24.4-r1
Juniper Junos OS Evolved=24.4-r1-s2
Juniper Junos OS Evolved=24.4-r1-s3
Juniper Junos OS Evolved=25.2
Juniper Junos OS Evolved=25.2-r1
Juniper Junos OS Evolved=25.2-r2

Remediation

Information

The following software releases have been updated to resolve this specific issue: Junos OS: 21.2R3-S10, 22.4R3-S8, 23.2R2-S5, 23.4R2-S6, 24.2R2-S2, 24.4R2, 25.2R1-S1, 25.2R2, 25.4R1, and all subsequent releases. Junos OS Evolved: 22.4R3-S8-EVO, 23.2R2-S5-EVO, 23.4R2-S6-EVO, 24.2R2-S2-EVO, 24.4R2-EVO, 25.2R1-S1-EVO, 25.2R2-EVO, 25.4R1-EVO, and all subsequent releases.

Event History

Jan 15, 2026
CVE Published
via MITRE·08:14 PM
Data Sourced
via MITRE·08:14 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-59961?

CVE-2025-59961 has a critical severity rating due to improper permission settings that allow low-privileged users to write to a critical resource.

2

How do I fix CVE-2025-59961?

To fix CVE-2025-59961, adjust the permissions of the Unix socket used by the jdhcpd process to restrict write access.

3

Which versions of Junos OS are affected by CVE-2025-59961?

CVE-2025-59961 affects vulnerable versions of Junos OS up to 21.2R3-S10 and 22.2, along with certain versions of Junos OS Evolved up to 22.4.

4

Can CVE-2025-59961 be exploited remotely?

CVE-2025-59961 cannot be exploited remotely as it requires local access by a low-privileged user.

5

What impact does CVE-2025-59961 have on system security?

CVE-2025-59961 could allow unauthorized access and potential control over network operations by a low-privileged user, compromising overall system security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203