Command Injection Vulnerability in Cisco ThousandEyes Enterprise Agent

CVE-2026-20206

What is CVE-2026-20206?

A security flaw in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could enable authenticated attackers to execute arbitrary commands on agents. This issue arises from inadequate input validation of command arguments provided by users. By successfully authenticating to the ThousandEyes SaaS, an attacker could submit specially crafted input into the affected parameters, potentially gaining the ability to execute commands within the BrowserBot container with node user privileges. This vulnerability highlights the importance of robust input validation and access controls in preventing unauthorized command execution.

References