CVE-2026-103406 PUBLISHED

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

Assigner: juniper
Reserved: 30.09.2026 Published: 28.10.2026 Updated: 28.10.2026

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Juniper Networks
Product	Session Smart Conductor
Versions	Default: unaffected affected from 0 to 7.0.5 (excl.) affected from 7.1.0 to 7.1.7 (excl.) affected from 7.2.0 to 7.2.3 (excl.)

Exploits

Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

Workarounds

No available workarounds exist for this issue.

Solutions

The following software releases of Session Smart Conductor have been updated to resolve these specific issues: * 7.0.5

and all subsequent releases; * 7.1.7

and all subsequent releases; * 7.2.3 and all subsequent releases.

References

https://supportportal.juniper.net/JSA112183

Problem Types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CWE