---
id: CVE-2026-34485
title: A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
summary: >-
  Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability
  where a low-privileged authenticated attacker can bypass the SSH isolation
  mechanism and gain access to the underlying operating system shell via a
  custom SSH…
severity: none
vendor: Nokia
product: Nokia 1830 Global Express (GX)
affected:
  - '1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0'
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T12:13:17.792Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-34485'
references:
  - url: >-
      https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/
    label: Nokia Product Security Advisory
tags:
  - cve.org
ingestedAt: '2026-10-20T13:07:11.084Z'
---

## Overview

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

## Affected

- `1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.