CVE-2026-73464 — Security Advisory 0166

Description (CNA)

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.29.0F before 4.30.0F; affected 4.30.0F before 4.31.0F; affected 4.31.0F before 4.32.0F; affected 4.32.0F before 4.33.0F; affected 4.33.0F through 4.33.8M; affected 4.34.0F through 4.34.7M; affected 4.35.0F through 4.35.5M; affected 4.36.0F through 4.36.0.1F

CWE

CWE-94

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.