CVE-2026-73456

Summary

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Affected Software

Weaknesses

• CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

Workarounds

To secure the agent against CVE-2026-73456, configure the service to use mutual TLS and enable only x509-spiffe authentication:

management security ssl profile P1 certificate server.crt key server.key trust certificate ca_client.crt chain certificate ca_signing.crt ! management api gnpsi transport grpc t2 ssl profile P1 port 7001 authentication username priority x509-spiffe no disabled

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158

• ←Previous
• Next→