Citrix NetScaler command execution

What it means for your AI agents

Gateways and VPN appliances often sit in front of the internal tools and APIs your agents call. If one is compromised, an attacker can watch or change agent traffic and reach the same systems your agents can.

• List which agent tools and internal APIs are reached through the affected appliance.
• Review the appliance's logs for the period it was exposed before trusting traffic through it.
• Rotate credentials for systems behind it if compromise can't be ruled out.

Details

CVE-2026-88771 allows unauthenticated command execution on affected Citrix NetScaler ADC and Gateway appliances.

The issue can affect default configurations and occurs before the authentication boundary, so exposure review should not be limited to appliances with optional features enabled.

Patching remains necessary. WAF and access controls can reduce exposure of applicable web authentication traffic but do not automatically protect other gateway services, including DTLS listeners.

Risk

Citrix reports exploitation of unmitigated appliances. Attackers can compromise affected gateways before sign-in, including deployments using the default configuration.

Affected deployments

Customer-managed NetScaler ADC or Gateway appliances running an affected release. Default configurations are affected; no optional feature needs to be enabled.

Recommended action

Update affected appliances using Citrix's bulletin. Investigate suspected compromise using the vendor's incident-response guidance.

1. 1Inventory all customer-managed NetScaler ADC and Gateway appliances, including Internet-facing and default configurations.
2. 2Apply Citrix remediation and investigate any suspected compromise using the vendor's incident-response guidance. Citrix security bulletin

Citrix suspected-compromise guidance ↗

1. 1Review whether alternate hostnames, direct-origin paths, or non-HTTP gateway services bypass protective controls.

Check your exposure with an agent

Paste this into an AI agent that can see your infrastructure. It asks for a read-only check of what's affected, including the systems behind your agents, and a table you can act on. Copying it changes nothing.

Assess whether the infrastructure you can access is affected by Citrix NetScaler command execution (CVE-2026-88771). Work read-only within your authorized access: do not run exploits, change configuration, restart services or install anything.

1. Confirm the affected and fixed versions from the vendor advisories and CVE records:
   - https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html
   - https://support.citrix.com/external/article/CTX697096
   - https://www.cve.org/CVERecord?id=CVE-2026-88771
   Cite each source and the date you read it. Say plainly what you could not verify.

2. Inventory the systems that could run the affected software, including the hosts, containers, MCP servers, tool runners and sandboxes behind any AI agents. For each, record the asset, environment, owner if known and the version actually running, from read-only evidence (package metadata, version commands, platform inventory).

3. Note which affected systems are reachable from the internet or from agents and tools, and which credentials (model-provider keys, tool tokens, service accounts) are stored on them.

4. Report one row per asset: asset, running version, affected (yes / no / unknown), reachable from, credentials at risk, evidence, and the next step. List anything you could not access as a gap rather than assuming it is safe.