Authenticated command execution via inadequate privilege checks

Improper privilege management in Citrix NetScaler Console and Agent allows remote authenticated users to execute commands. An authenticated Console workflow executes commands without an additional authorization check; Citrix has not disclosed the affected endpoint or function. Exploitation requires existing Console access and a deployed NetScaler Agent, and successful abuse can compromise deployment data and services.