CVE-2026-103401: Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

Published Oct 28, 2026

Updated

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.

This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.

Affected Software

2 affected components

Juniper Networks Session Smart Router

Juniper Networks Session Smart Conductor

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Networks Session Smart Router and Session Smart Conductor to a version that resolves this vulnerability.
Fixed in 7.0.5
Upgrade
Upgrade Juniper Networks Session Smart Router and Session Smart Conductor to a version that resolves this vulnerability.
Fixed in 7.1.7
Upgrade
Upgrade Juniper Networks Session Smart Router and Session Smart Conductor to a version that resolves this vulnerability.
Fixed in 7.2.3

Event History

Oct 28, 2026

CVE Published

via MITRE·04:34 PM

Data Sourced

via MITRE·04:34 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Mist-managed routers and unmanaged routers that have not yet been onboarded to a Conductor can be exploited. Routers already managed by a Conductor are not affected.

What access does an attacker need?

The vulnerability requires a local unprivileged user. The affected web server handlers expose unauthenticated API endpoints that can be used to overwrite arbitrary files as root.

How can I determine whether a router is affected?

Determine whether the router is Mist-managed or remains unmanaged and has not yet been onboarded to a Conductor. A router already managed by a Conductor is not affected according to the advisory information provided.

CVE-2026-103401: Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

How can I determine whether a router is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

How can I determine whether a router is affected?