Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

Arista EOS gNMI allows attacker to run code as root

CVE-2026-73464 · published 1 month ago
Summary

If the gNMI management interface is turned on in Arista EOS, a user who has valid gNMI credentials could send a specially crafted request that runs any code they choose with full system privileges. This gives the attacker complete control over the switch. Apply the vendor's update or disable the gNMI interface until the fix is installed.

What to do
  • Update arista networks eos to version 4.30.0F or later.
Affected software
VendorProductAffected versions
arista networks eos < 4.30.0F
Original advisory text
Security Advisory 0166
On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published16 Sep 2026
Updated4 Nov 2026
First seen16 Sep 2026
Sources
CVE-2026-73464 · NVD
CVE-2026-73464 · MITRE
Track software like this
Free during beta