CVE-2026-101978: Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used

Published Oct 14, 2026

Updated

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response.

Affected Software

1 affected component

Juniper Networks Junos OS Evolved

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 23.4R2-S8.11-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 24.2R2-S5.6-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 24.4R2-S5-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 25.2R2-S2-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 25.2X100-D35-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 25.4R1-S3-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 25.4R2-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 25.4X300-D40-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 26.2R1-S2-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 26.2R2-EVO
Upgrade
Upgrade Juniper Junos OS Evolved PTX Series to a version that resolves this vulnerability.
Fixed in 26.4R1-EVO

Event History

Oct 14, 2026

CVE Published

via MITRE·04:14 PM

Data Sourced

via MITRE·04:14 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which systems are exposed to exploitation?

Exposure is limited to Junos OS Evolved deployments on PTX Series where zero-touch provisioning is used. The attacker must be able to reach the management LAN.

Does an attacker need credentials or user interaction?

No. The vulnerability can be exploited by an unauthenticated attacker, and no user interaction is required.

What level of access could successful exploitation provide?

A successful attacker can execute commands as root, resulting in complete compromise of confidentiality, integrity, and availability.