CVE-2026-101150 — Security Advisory 0186

CVE-2026-101150

Security Advisory 0186 PUBLISHED

Description (CNA)

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.

Affected (CNA)

Vendor / product	Versions
Arista Networks / CloudVision Portal	affected 2026.2.0; affected 2026.1.0 through 2026.1.2; affected 2025.3.0 through 2025.3.3; affected 2023.3.0 before 2025.3.0

CWE

CWE-918

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.