CVE-2026-33793

CVE-2026-33793 is a privilege escalation vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved. The flaw exists in the User Interface component and allows local, low-privileged users to execute unsigned Python op scripts as root-equivalent users when such scripts are configured on the device, thereby gaining full system compromise. The vulnerability impacts all major versions of both platforms, with fixes available in specific patched releases across versions 22.4 through 24.4. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8. Attack exploitation requires local access and low privileges, with no user interaction necessary and low attack complexity, making it relatively straightforward to exploit once an attacker has obtained initial system access. The impact is critical, as successful exploitation grants attackers root-level privileges with complete confidentiality, integrity, and availability compromise possible. There is currently no evidence of active exploitation in the wild. The vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog and remains on inactive status regarding public exploit availability. However, the FAUCET risk score of 49.0/100 indicates moderate community attention and concern relative to other disclosed vulnerabilities, warranting prompt patching of affected systems.