Memory Leak Vulnerability in Junos OS and Junos OS Evolved by Juniper Networks

CVE-2025-52986

What is CVE-2025-52986?

A vulnerability in the routing protocol daemon (rpd) of Juniper Networks' Junos OS and Junos OS Evolved can be exploited by a local user with low privileges. When RIB sharding is enabled, executing routing-related commands can lead to a memory leak. This leak may be monitored using specific CLI commands, and consistent exploitation can exhaust available memory, causing rpd to crash and restart. Affected versions include various releases of Junos OS and Junos OS Evolved, requiring immediate attention to maintain device stability.

References