CVE-2026-101154 — Security Advisory 0189

CVE-2026-101154

Security Advisory 0189 PUBLISHED

Description (CNA)

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository.

Affected (CNA)

Vendor / product	Versions
Arista Networks / CloudVision Portal	affected 2026.2.0; affected 2026.1.0 through 2026.1.2; affected 2025.3.0 through 2025.3.3; affected 2018.1.0 before 2025.3.0

CWE

CWE-22

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24805-security-advisory-0189

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.