CVE-2026-19640: Security Advisory 0170
On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially allowing access beyond their currently assigned permissions.
This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.33.9M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.34.8M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.35.6M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.36.1F - Compensating control
On affected platforms, ensure only authenticated users have access to the gNMI (gRPC Network Management Interface), restricting gNMI access to accounts/roles that should have the required permissions to mitigate incorrect authorization results.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Affected platforms running Arista EOS are exposed when a user has authenticated access to the gNMI interface. The issue concerns authorization decisions for that interface rather than unauthenticated access.
What does an attacker need to exploit it?
An attacker needs valid authenticated access and access to gNMI. Exploitation has high attack complexity and may allow the user to obtain access beyond their currently assigned permissions.
Are there known malicious uses in customer environments?
Arista states that it is not aware of any malicious use of this issue in customer networks.