---
id: CVE-2026-34485
title: A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
summary: >-
  Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability
  where a low-privileged authenticated attacker can bypass the SSH isolation
  mechanism and gain access to the underlying operating system shell via a
  custom SSH…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: adp
vendor: Nokia
product: Nokia 1830 Global Express (GX)
affected:
  - '1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-29T17:39:58.118880Z'
published: '2026-10-20'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T17:40:16.968Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-34485'
references:
  - url: >-
      https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/
    label: Nokia Product Security Advisory
tags:
  - cve.org
epss: 0.00153
epssPercentile: 0.04408
ingestedAt: '2026-10-20T13:07:11.084Z'
---

## Overview

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

## Affected

- `1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.