CVE-2026-73453: Security Advisory 0174
An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled by default in Arista EOS. By crafting a malicious packet during the initiation of a P4Runtime session, an attacker can obtain complete administrative control over the compromised switch.
This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.34.8M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.35.6M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.36.2F - Compensating control
Ensure P4Runtime remains disabled in Arista EOS (P4Runtime is disabled by default, and the vulnerability affects Arista EOS configured with P4Runtime).
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Affected Arista EOS platforms are exposed only when P4Runtime is configured and running. P4Runtime is disabled by default in Arista EOS.
What does an attacker need to exploit it?
An attacker needs network access to act as an unauthenticated P4Runtime client and send a malicious packet while initiating a P4Runtime session. No authentication or user interaction is required.
What is the impact of successful exploitation?
Successful exploitation can provide arbitrary code execution and complete administrative control of the compromised switch.
Is there evidence of exploitation in customer environments?
Arista states that it is not aware of malicious exploitation of this vulnerability in customer networks.