Incorrect Permission Assignment in Juniper Networks DHCP Daemon Affecting Junos OS

CVE-2025-59961

What is CVE-2025-59961?

A vulnerability exists in the Juniper DHCP daemon (jdhcpd) of Juniper Networks' Junos OS and Junos OS Evolved, where a local low-privileged user can exploit incorrect permission assignments to write to the Unix socket responsible for managing the DHCP service. This misconfiguration allows unauthorized control over the DHCP server or relay, potentially leading to significant network disruptions or unauthorized access. Systems running affected versions of Junos OS and Junos OS Evolved are at risk and should be updated accordingly.

References